This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
File: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft (raw, json)
Hash identifier: Uef6e3TMO1z4+0j2bF/RMec4EvzqcqJwRa6lutJmpVo=
Subject key identifier: D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B
Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235
Certificate serial: 027A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
Manifest number: 026D
Signing time: Mon 15 Dec 2025 22:09:17 +0000
Manifest this update: Mon 15 Dec 2025 22:09:17 +0000
Manifest next update: Wed 17 Dec 2025 22:09:17 +0000
Files and hashes: 1: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl (hash: 4RQRi4Mc2CU7GZ8pu+JqvufQY/UYZlpxucYCAoCMUfQ=)
2: cuG7oZP8T6Ux1QOOxy7rReO03WE.roa (hash: 6O0kAE8tsAz31kqIlNu5Z5fWznHZiyhny8U2Ch3QHIU=)
3: sXMoc_WHbcaV0haB_7Aw1bJn7K0.roa (hash: +Am0J/CRMHQSKWsxPEos6r+asMM7hp5+QLfR4GTuIPE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 07:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235
Validity
Not Before: Dec 15 22:09:17 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D28E11617B4C955FB6300FD75A8B93929576432B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:fc:78:d8:99:fc:9f:df:13:8d:d1:ac:64:
da:07:f2:f1:c4:21:f9:7a:f4:bd:f6:3b:25:6e:26:
e2:f8:e1:37:e7:0b:73:7c:51:45:6e:83:6b:94:69:
29:85:e8:12:e3:89:a1:3b:ff:12:31:1f:f4:e4:fb:
f8:4e:22:07:56:35:88:cc:fd:a1:1e:27:aa:93:3f:
31:79:13:e1:d4:dc:9e:16:68:e9:b3:39:34:54:2a:
21:d4:7c:d7:04:1c:c1:a1:99:4c:e2:07:1d:fd:c9:
dd:d7:87:63:3e:2f:a7:c2:e5:18:51:f2:83:dd:7c:
54:ae:59:e9:4a:bb:dd:48:eb:68:a3:1f:62:7f:3d:
34:68:86:29:19:08:e8:24:22:70:36:f6:76:52:a9:
48:51:72:21:8f:15:11:0e:ba:4a:09:3a:7d:ee:a3:
3e:35:29:df:83:3c:dc:25:9e:3b:e3:ef:eb:9a:ce:
26:45:04:4a:df:d5:6d:a3:44:67:c1:5d:4e:01:87:
5a:79:3f:9c:05:47:c8:99:23:69:cb:1e:af:81:ec:
a1:1d:72:8e:3e:b0:07:0e:39:d6:68:f5:97:ad:dc:
da:f4:c4:d9:02:59:46:59:ae:0a:c1:e1:0b:fb:44:
86:1f:19:33:d8:14:cc:45:f5:45:21:93:b9:01:54:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B
X509v3 Authority Key Identifier:
keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c1:4b:00:65:89:5d:f8:df:2e:8e:f7:03:16:19:e9:92:91:
5c:53:9f:04:b9:bd:60:5b:40:50:2c:5c:29:ac:79:6c:e8:42:
da:02:10:9b:f7:34:cd:48:ed:18:aa:0d:70:23:19:90:db:6f:
1f:1c:e5:2d:11:38:90:2c:84:be:21:c6:bc:a9:b7:b6:cf:9a:
0d:f8:ad:03:be:5a:7e:d7:98:96:99:ea:f2:45:70:cf:34:0a:
ca:2c:b5:b2:c7:88:bf:c0:d7:85:b1:e0:ec:c7:04:a5:4f:00:
af:ab:17:49:8b:e1:10:b4:c2:fe:d3:b3:8a:21:69:6f:27:88:
52:9f:80:c9:e1:0c:f7:da:5a:4d:04:c9:5a:e6:55:52:1b:87:
0b:65:30:ac:c6:58:cc:52:2d:13:bc:99:8e:86:58:be:68:29:
5b:2d:31:6d:ba:02:e9:66:61:78:1e:58:b7:8d:43:38:62:97:
84:e8:22:8f:49:90:a5:d2:ac:fb:07:de:3d:4b:99:ea:89:68:
8d:5f:55:17:6a:c2:8c:57:4c:d5:07:8e:1c:c1:93:76:4e:82:
14:13:c6:21:8b:79:d7:e5:f6:d0:00:29:ef:1c:bc:7f:a0:35:
65:f9:c1:31:a1:33:a0:f6:b9:ed:2c:41:47:35:16:d0:da:b1:
4d:df:ef:ca
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM3
MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIzNTAeFw0yNTEyMTUy
MjA5MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyOEUxMTYxN0I0Qzk1
NUZCNjMwMEZENzVBOEI5MzkyOTU3NjQzMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUWPx42Jn8n98TjdGsZNoH8vHEIfl69L32OyVuJuL44TfnC3N8
UUVug2uUaSmF6BLjiaE7/xIxH/Tk+/hOIgdWNYjM/aEeJ6qTPzF5E+HU3J4WaOmz
OTRUKiHUfNcEHMGhmUziBx39yd3Xh2M+L6fC5RhR8oPdfFSuWelKu91I62ijH2J/
PTRohikZCOgkInA29nZSqUhRciGPFREOukoJOn3uoz41Kd+DPNwlnjvj7+uaziZF
BErf1W2jRGfBXU4Bh1p5P5wFR8iZI2nLHq+B7KEdco4+sAcOOdZo9Zet3Nr0xNkC
WUZZrgrB4Qv7RIYfGTPYFMxF9UUhk7kBVActAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU0o4RYXtMlV+2MA/XWouTkpV2QyswHwYDVR0jBBgwFoAUHHBzpgZsdlhC/fBx
aeQ1GKC7AjUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElO
RS9ISEJ6cGdac2RsaENfZkJ4YWVRMUdLQzdBalUuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05VTkxJTkUvSEhCenBnWnNkbGhDX2ZC
eGFlUTFHS0M3QWpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AODBSwBliV343y6O9wMWGemSkVxTnwS5vWBbQFAsXCmseWzoQtoCEJv3NM1I7Riq
DXAjGZDbbx8c5S0ROJAshL4hxrypt7bPmg34rQO+Wn7XmJaZ6vJFcM80CsostbLH
iL/A14Wx4OzHBKVPAK+rF0mL4RC0wv7Ts4ohaW8niFKfgMnhDPfaWk0EyVrmVVIb
hwtlMKzGWMxSLRO8mY6GWL5oKVstMW26AulmYXgeWLeNQzhil4ToIo9JkKXSrPsH
3j1LmeqJaI1fVRdqwoxXTNUHjhzBk3ZOghQTxiGLedfl9tAAKe8cvH+gNWX5wTGh
M6D2ue0sQUc1FtDasU3f78o=
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:47:37 2025 by rpki-client