This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft
File: BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft (raw, json)
Hash identifier: ZYgEinMnJQZRbQkyF0E4ull+l+w2d7jtzWQq8Wm5ELE=
Subject key identifier: 7B:4D:BB:8D:68:2D:B3:D9:7C:C3:89:3D:CD:0D:A4:52:D6:35:88:C6
Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Certificate serial: 0370
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft
Manifest number: 0359
Signing time: Thu 12 Feb 2026 10:19:16 +0000
Manifest this update: Thu 12 Feb 2026 10:19:16 +0000
Manifest next update: Sat 14 Feb 2026 10:19:16 +0000
Files and hashes: 1: 0ruNZaf4zP4R60zwGIPYNQUCKLs.roa (hash: CSjhRcxRo85TneH5M3WRHZ4s5BSrGfAxBHImRFUGCyo=)
2: BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl (hash: 5K+kiVfnD/F/H9srjoR9xW0MvMnftRF3PCX9OKmYU5Y=)
3: N7Q7IFypIENBYArJTXcGKJKRBbs.roa (hash: /OW24I5ONNUa95QnDOy+7MQGDseGU42JsNc0PkCLjM8=)
4: _BhkDsaaAlFP7_WxnJmHzE0SGjA.roa (hash: AIeV+/04dXFy+tdEDHpzawPHXWrwO0V9rradM84Q5ak=)
5: gbc43eWUZVEBi87D3ZLTS0QBMew.roa (hash: AUTKJv0ExY4qaW+hKCLNH4RoQ+VjP6iWCluGn5UEJII=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Validity
Not Before: Feb 12 10:19:16 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7B4DBB8D682DB3D97CC3893DCD0DA452D63588C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:a2:86:16:f5:03:a0:35:cd:1f:ef:5b:81:
32:cb:47:1c:0d:ae:c2:e0:3d:79:0b:b4:c3:f4:40:
0e:c7:3c:ba:ca:7e:2f:82:92:97:ff:9b:7e:96:9e:
17:f2:6f:5d:a3:04:8f:80:03:24:b3:2c:09:1d:53:
af:ba:25:45:10:6a:0a:58:6c:fd:e3:39:21:d6:f7:
bd:fb:c5:a2:f2:46:32:9c:94:af:d2:25:7e:93:18:
b6:b3:52:af:3d:4f:9c:83:65:bc:da:69:8e:4e:fa:
b0:fc:18:2e:e1:d2:fd:50:6b:61:9c:0e:5b:9b:1b:
97:c5:84:2e:72:d8:b3:f5:d4:07:16:59:7c:c8:65:
54:8e:04:0e:ba:f2:3e:d8:5a:54:9b:06:60:b4:30:
cd:2d:fd:73:10:ee:18:67:e0:cb:17:41:ba:5e:81:
95:a9:aa:8d:72:2c:0f:72:f4:3e:55:2d:40:62:67:
42:d5:55:5d:a8:3d:2a:6c:e7:dd:ce:0b:19:f4:91:
70:87:ce:ea:94:97:0a:ef:37:87:87:70:92:7e:da:
8f:49:c9:71:ca:96:6a:ba:2c:5f:f2:59:eb:4c:c5:
cb:61:81:91:40:99:f5:01:1f:d7:26:6a:f5:4c:f2:
b4:7c:c0:2c:9b:80:74:39:a2:71:9d:c0:7a:da:94:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:BB:8D:68:2D:B3:D9:7C:C3:89:3D:CD:0D:A4:52:D6:35:88:C6
X509v3 Authority Key Identifier:
keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:11:79:76:b7:c1:23:19:ee:bc:73:d8:bb:32:59:c3:2e:
67:70:80:89:39:e1:a8:b2:66:1d:bf:d2:16:3d:bb:14:c6:c5:
02:39:93:04:a9:4b:56:52:8c:e7:e0:8b:4f:c3:bd:d6:0e:d3:
15:58:69:3e:b6:07:8c:92:9f:7d:b8:31:9d:9b:33:75:1c:ab:
5c:51:a0:2d:a8:4a:12:d8:3e:b5:e1:85:89:02:40:c8:c0:8b:
84:bf:94:78:9c:27:bc:73:01:55:8e:ec:ea:cf:59:a8:3e:bb:
27:fe:f8:bb:cc:f5:11:26:19:7f:a0:97:6a:e2:3e:9e:0f:cf:
29:e8:44:c2:82:16:0e:df:ed:04:bb:91:b7:49:df:fc:4b:2f:
f8:b4:ae:31:1a:96:dc:bf:dd:d6:c6:b6:9f:67:3b:85:0b:df:
f8:e0:a7:51:f2:84:e3:9e:59:d6:d6:f9:10:f9:9f:1b:5c:c9:
80:c9:95:b9:22:1e:97:6b:aa:ac:5f:63:00:29:bc:80:4b:ae:
22:4e:67:f7:d2:e2:12:67:d8:f1:5e:7c:e5:32:5e:d0:98:85:
3b:cd:d1:b2:a4:4b:50:c9:0c:15:28:be:82:e0:b6:81:4a:96:
09:46:e9:1a:9d:eb:ea:4c:c3:d0:05:89:9e:5c:dd:1e:5a:3d:
d4:27:58:ca
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ4
NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMyNzAeFw0yNjAyMTIx
MDE5MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdCNERCQjhENjgyREIz
RDk3Q0MzODkzRENEMERBNDUyRDYzNTg4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBIKKGFvUDoDXNH+9bgTLLRxwNrsLgPXkLtMP0QA7HPLrKfi+C
kpf/m36Wnhfyb12jBI+AAySzLAkdU6+6JUUQagpYbP3jOSHW9737xaLyRjKclK/S
JX6TGLazUq89T5yDZbzaaY5O+rD8GC7h0v1Qa2GcDlubG5fFhC5y2LP11AcWWXzI
ZVSOBA668j7YWlSbBmC0MM0t/XMQ7hhn4MsXQbpegZWpqo1yLA9y9D5VLUBiZ0LV
VV2oPSps593OCxn0kXCHzuqUlwrvN4eHcJJ+2o9JyXHKlmq6LF/yWetMxcthgZFA
mfUBH9cmavVM8rR8wCybgHQ5onGdwHralIUfAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUe027jWgts9l8w4k9zQ2kUtY1iMYwHwYDVR0jBBgwFoAUBIbx1RHSwi7JWZSx
I7OiSWLB4ycwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9O
L0JJYngxUkhTd2k3SldaU3hJN09pU1dMQjR5Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQklieDFSSFN3aTdKV1pTeEk3T2lTV0xCNHljLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OL0JJYngxUkhTd2k3SldaU3hJ
N09pU1dMQjR5Yy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCp
3RF5drfBIxnuvHPYuzJZwy5ncICJOeGosmYdv9IWPbsUxsUCOZMEqUtWUozn4ItP
w73WDtMVWGk+tgeMkp99uDGdmzN1HKtcUaAtqEoS2D614YWJAkDIwIuEv5R4nCe8
cwFVjuzqz1moPrsn/vi7zPURJhl/oJdq4j6eD88p6ETCghYO3+0Eu5G3Sd/8Sy/4
tK4xGpbcv93WxrafZzuFC9/44KdR8oTjnlnW1vkQ+Z8bXMmAyZW5Ih6Xa6qsX2MA
KbyAS64iTmf30uISZ9jxXnzlMl7QmIU7zdGypEtQyQwVKL6C4LaBSpYJRukanevq
TMPQBYmeXN0eWj3UJ1jK
-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:28 2026 by rpki-client