This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
File: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft (raw, json)
Hash identifier: GDveIQKdrskJfeuFL5UTX0lOeHRPEwrJS1oFwbhk6lg=
Subject key identifier: 14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9
Authority key identifier: DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF
Certificate issuer: /CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF
Certificate serial: 0360
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
Manifest number: 035E
Signing time: Wed 10 Dec 2025 04:06:11 +0000
Manifest this update: Wed 10 Dec 2025 04:06:11 +0000
Manifest next update: Wed 10 Dec 2025 10:06:11 +0000
Files and hashes: 1: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl (hash: Wm/QKt6Hgxx5Oe+1VYE0lROr1EQJ6DTGf8hqWY+FYNw=)
2: EOtjY12nXNnenB16AIWc3Jh3NF4.roa (hash: Dd6iulKgytlJlVAbqdWg8yiBukB823mXx4bredXWnlI=)
3: h3gM3umksJIYEAeAEiPCdJFIFto.roa (hash: P0RBcokTOeWzNU9SKVJvXJAAZk3Gv4yQBEr42Kf75Ew=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 10:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF
Validity
Not Before: Dec 10 04:06:11 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=140D9413D896A12C05A4532F32C66F65F10DB6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:73:ee:5a:a6:e3:54:27:2b:18:34:ac:07:
9a:f9:21:e7:2e:7f:37:1f:4a:b7:05:b9:a0:ef:f3:
85:f7:6d:92:2e:9a:e9:57:b8:9a:f1:86:ea:5d:82:
6d:48:90:71:57:0b:2c:2a:06:4a:8c:aa:df:bd:ae:
9e:9b:78:1b:f1:d0:4f:c1:3a:24:50:d6:19:ed:5b:
8d:0b:0c:18:fe:f2:1e:9e:49:a5:c8:ce:fe:b1:4e:
7e:98:f6:a9:3f:6b:f2:4d:ee:9e:16:85:48:28:c3:
f8:6d:12:a4:7e:17:7d:33:2e:3f:0d:01:6f:4e:52:
f7:67:8c:17:1c:46:29:e3:91:6b:14:86:88:64:42:
75:7b:a0:47:b7:c6:1e:1c:96:c2:d4:b4:41:f2:73:
5a:7f:45:cb:8b:18:1b:ac:c2:51:7f:56:85:d8:3d:
b5:a6:dd:d6:94:47:6d:a3:36:c0:62:66:e8:67:27:
b8:18:f6:c7:89:51:62:7f:53:af:70:5b:b9:97:ca:
41:e0:4b:c1:d6:2a:b2:f2:66:ed:0a:2a:de:de:32:
01:d9:b1:e0:a8:7a:27:5a:82:82:ac:1d:dd:99:d8:
68:09:58:61:ed:cb:cf:17:de:a6:fc:31:36:be:bf:
cf:6f:2b:61:15:a7:cd:78:80:d6:76:26:c3:df:02:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9
X509v3 Authority Key Identifier:
keyid:DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:e6:25:dd:2b:5e:f4:48:b0:50:1a:fe:3d:73:8a:90:9a:
cf:13:af:fb:e2:45:42:70:01:83:4c:f3:80:f1:78:65:27:ae:
ae:6c:71:dd:14:29:f4:8a:97:91:66:4e:28:64:5c:19:1b:00:
87:23:02:3d:6e:a4:39:ca:cc:74:f0:84:9f:b1:fa:6f:10:be:
5b:db:6c:09:59:e1:33:a8:ab:2c:70:68:aa:05:bb:cb:f9:39:
3c:7d:9c:0d:97:e4:32:3c:eb:b3:5e:df:c2:5a:8a:b2:6f:cf:
b3:6b:17:28:32:8d:e8:9a:32:85:6f:47:e5:a9:1b:be:2d:02:
2e:b5:67:53:f4:86:15:58:7e:2b:ec:52:48:fd:2a:f3:d4:8a:
b2:95:a1:f0:36:73:40:63:31:b3:65:18:ef:94:2a:3d:d5:d3:
2d:f8:21:3a:82:90:52:1f:4e:e2:f6:67:7f:c9:62:e5:e9:36:
95:f6:c8:ac:a6:54:a8:22:7f:62:95:64:1b:6b:7d:50:58:cf:
96:4b:af:52:43:6a:2c:ee:e5:2a:42:37:d7:2f:71:dd:2b:b9:
c4:2f:a2:4e:82:2b:8a:15:2b:36:07:7b:66:23:84:59:10:a2:
7d:e1:e9:23:e0:1b:de:bd:28:a1:e8:f8:de:bc:fa:59:71:1b:
24:ed:0c:5e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRENE
NDU2QTA5RDU0MTQwREJDNDJEMzJCMDlENkU3Nzc4QjU4QUFFRjAeFw0yNTEyMTAw
NDA2MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0MEQ5NDEzRDg5NkEx
MkMwNUE0NTMyRjMyQzY2RjY1RjEwREI2QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU/3PuWqbjVCcrGDSsB5r5IecufzcfSrcFuaDv84X3bZIumulX
uJrxhupdgm1IkHFXCywqBkqMqt+9rp6beBvx0E/BOiRQ1hntW40LDBj+8h6eSaXI
zv6xTn6Y9qk/a/JN7p4WhUgow/htEqR+F30zLj8NAW9OUvdnjBccRinjkWsUhohk
QnV7oEe3xh4clsLUtEHyc1p/RcuLGBuswlF/VoXYPbWm3daUR22jNsBiZuhnJ7gY
9seJUWJ/U69wW7mXykHgS8HWKrLyZu0KKt7eMgHZseCoeidagoKsHd2Z2GgJWGHt
y88X3qb8MTa+v89vK2EVp814gNZ2JsPfAuNdAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUFA2UE9iWoSwFpFMvMsZvZfENtqkwHwYDVR0jBBgwFoAU3NRWoJ1UFA28QtMr
Cdbnd4tYqu8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUlVJS0Uv
M05SV29KMVVGQTI4UXRNckNkYm5kNHRZcXU4LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zTlJXb0oxVUZBMjhRdE1yQ2RibmQ0dFlxdTguY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9SVUlLRS8zTlJXb0oxVUZBMjhRdE1yQ2Ri
bmQ0dFlxdTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/Tm
Jd0rXvRIsFAa/j1zipCazxOv++JFQnABg0zzgPF4ZSeurmxx3RQp9IqXkWZOKGRc
GRsAhyMCPW6kOcrMdPCEn7H6bxC+W9tsCVnhM6irLHBoqgW7y/k5PH2cDZfkMjzr
s17fwlqKsm/Ps2sXKDKN6JoyhW9H5akbvi0CLrVnU/SGFVh+K+xSSP0q89SKspWh
8DZzQGMxs2UY75QqPdXTLfghOoKQUh9O4vZnf8li5ek2lfbIrKZUqCJ/YpVkG2t9
UFjPlkuvUkNqLO7lKkI31y9x3Su5xC+iToIrihUrNgd7ZiOEWRCifeHpI+Ab3r0o
oej43rz6WXEbJO0MXg==
-----END CERTIFICATE-----
Generated at Wed Dec 10 09:06:20 2025 by rpki-client