This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
File:                     lrigjnWckCEXMt7oT9S-JZ2qD_0.mft (raw, json)
Hash identifier:          FLIf5jBEaXyah1SyMgohXaOkfP+ebck6CuwhYbEizQs=
Subject key identifier:   E4:73:CF:78:AA:BA:F6:F3:BE:71:70:50:9F:98:58:07:55:FB:CB:90
Authority key identifier: 96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD
Certificate issuer:       /CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD
Certificate serial:       02B5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
Manifest number:          02B2
Signing time:             Sun 25 Jan 2026 19:46:28 +0000
Manifest this update:     Sun 25 Jan 2026 19:46:28 +0000
Manifest next update:     Mon 26 Jan 2026 01:46:28 +0000
Files and hashes:         1: 8SDdfWWdA2UKWED7VTFb-Jl53qk.roa (hash: 3TropPm4x94A2igPbqGZDYqbWA5IKl6TPjf8pTJ1xac=)
                          2: _S-0ytL0WjOaLeYffXv0yRPOwKE.roa (hash: 9JMMDqWGlV8+ilgzZgbJ2RGf79H5oFWYSPPlOtT3U/8=)
                          3: hFBgGwCt5GL_bhH_EA7ARAyo_G4.roa (hash: 0KSGzv+Oi6FSZ6T88iHICyfFFmvh2P557/puOMNwYNA=)
                          4: lrigjnWckCEXMt7oT9S-JZ2qD_0.crl (hash: IEjzYAZxiTbu42zg463qlUJVZDpTBoyWe06PAy7eSGA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD
        Validity
            Not Before: Jan 25 19:46:28 2026 GMT
            Not After : Sep  9 15:30:25 2026 GMT
        Subject: CN=E473CF78AABAF6F3BE7170509F98580755FBCB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:de:e5:a4:8c:43:88:e7:50:30:2e:ca:1f:
                    79:26:be:f1:7d:1e:03:56:22:96:86:02:6a:31:8d:
                    53:2d:e2:f3:53:c3:dd:1d:85:a4:bd:51:55:35:41:
                    05:e1:0a:87:1e:16:b9:03:43:5e:dd:0e:47:7c:d4:
                    37:f2:7c:29:24:d6:d9:a8:72:a8:75:b6:6b:d7:32:
                    05:75:bc:c7:8a:77:8b:85:43:3c:0d:91:fb:10:a7:
                    c5:06:ac:73:72:d1:d2:1b:2a:03:2f:9d:93:7b:28:
                    99:6b:e7:6a:a2:d3:1b:e4:ea:ae:cf:3e:34:a5:d6:
                    d7:3b:b9:b5:fb:b7:66:c6:89:78:67:87:95:55:18:
                    5e:f3:6a:7d:3a:7c:48:73:d1:87:21:f4:f4:54:15:
                    07:5f:44:23:b4:f2:06:26:69:96:22:19:0e:d7:fc:
                    7d:9d:53:71:59:cb:b5:a3:73:76:b7:ed:ea:74:08:
                    62:fd:ff:4d:5e:eb:e6:eb:ca:60:7a:0e:00:94:00:
                    d2:9c:09:43:a2:49:ec:85:f3:4b:f8:7c:fb:97:83:
                    8b:21:cb:3a:0d:48:0d:93:52:c3:76:fe:53:5f:9f:
                    a2:ff:f1:69:4a:4f:ae:02:56:92:ef:c4:34:85:02:
                    59:1e:ee:1d:bd:e9:b1:d5:f9:a6:5a:89:28:15:a6:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:CF:78:AA:BA:F6:F3:BE:71:70:50:9F:98:58:07:55:FB:CB:90
            X509v3 Authority Key Identifier:
                keyid:96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:1e:47:4c:76:f8:7d:6b:42:f3:85:0f:e0:cf:d5:d5:e8:
         a2:dd:7d:45:4e:41:c3:e0:df:1a:b0:7d:5f:75:e1:65:72:a4:
         f8:ff:ea:f7:88:b1:a3:6e:52:00:aa:4f:99:29:97:ea:12:a3:
         78:89:92:f3:39:12:bd:2e:83:6b:b3:96:3b:22:23:ff:b9:0f:
         4c:2a:3a:8e:b6:16:04:92:18:bf:85:31:18:1e:47:f9:87:f5:
         0b:77:71:ee:88:18:42:89:2b:f6:9d:4c:9a:66:0d:8c:51:95:
         78:0e:91:ed:cd:31:72:bb:46:6e:b9:16:cb:2b:35:30:fb:c2:
         c5:75:89:1d:8c:62:5b:39:49:4a:e9:24:49:14:95:38:02:4f:
         61:f3:73:90:6c:9b:98:73:fc:65:50:9c:6c:6b:b1:9d:bf:99:
         84:6d:25:20:b6:77:c8:34:ca:9e:a9:95:03:39:9f:15:7e:73:
         90:2c:4f:b2:d4:00:b8:82:ff:8e:c4:79:c5:24:b7:b1:d7:22:
         82:e5:4c:db:fb:fe:3f:6d:a0:a6:27:f9:9f:30:84:97:59:41:
         83:5a:5a:90:d8:d1:a4:a7:9e:ac:d4:e6:75:6c:5c:66:ca:f6:
         49:d2:18:81:41:60:2e:36:9e:fb:6b:4e:d8:0c:62:a8:55:22:
         2e:09:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:59 2026 by rpki-client