This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
File: x1hCDPdi5IrXyqYOs53NYisftPY.mft (raw, json)
Hash identifier: /LxJVLFMfr9ksZ4CsXNFG5rSEtDuuywhxvgkEllhsMo=
Subject key identifier: 3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33
Authority key identifier: C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6
Certificate issuer: /CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
Certificate serial: 01C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
Manifest number: 01C2
Signing time: Tue 20 Jan 2026 15:45:29 +0000
Manifest this update: Tue 20 Jan 2026 15:45:29 +0000
Manifest next update: Thu 22 Jan 2026 15:45:29 +0000
Files and hashes: 1: bBSNn9sCzQJ-c6W6pbNOAisjYJQ.roa (hash: GMv3c2c3ddPdnP9XF6uQx6H8RorOB3gRV/gTV4C48uA=)
2: ctbYvQlOL6j448wTy_8FTGZ-sBI.roa (hash: XQt96vsMeGS6Wi8KdRRheyyn73riNaI61YlxOlZq/b8=)
3: x1hCDPdi5IrXyqYOs53NYisftPY.crl (hash: vDoizCrG9ojkTy3ja5Xos6mVHUq5HMx087c74sGS7XE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
Validity
Not Before: Jan 20 15:45:29 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3B2E1528E75A4B9A454579558F70254185675633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:1f:bc:16:1d:9c:c6:2f:56:f4:ff:ba:2b:
b1:61:05:0c:4e:14:c0:9c:13:62:be:3b:df:1a:59:
cb:cd:fd:61:c0:19:fb:93:ab:60:63:c7:76:cc:39:
d8:3a:0b:9a:a2:36:65:53:87:76:e5:66:ec:6a:14:
02:39:f0:02:2b:ce:80:59:ab:34:53:30:8f:90:74:
46:c6:98:c9:40:8d:c7:ef:66:f9:0a:ed:63:06:0d:
bc:a2:b8:ff:ce:72:47:4a:2a:b4:87:aa:50:c2:c0:
c7:b3:24:54:c7:dc:9f:85:94:77:8c:94:eb:f3:74:
00:bc:5f:1b:71:75:f4:3e:c1:3d:44:9a:e8:50:96:
6e:5f:e8:f8:fb:78:08:0f:4e:bb:ec:a8:d5:ec:5e:
d3:04:6f:f3:13:2e:55:7a:48:f1:42:df:6e:eb:c0:
35:87:5e:0e:53:c8:c1:52:27:0d:de:34:32:6a:66:
fb:9b:71:f2:98:b6:fa:97:39:b3:6e:ed:9a:4e:1f:
8d:b4:ed:d7:58:20:d0:98:49:39:6c:b5:92:b9:54:
0f:b2:5a:d8:00:96:3e:d5:62:81:8a:67:a3:f5:68:
c5:92:a5:cf:1a:dd:ee:5f:55:54:60:73:dc:6d:41:
09:c8:87:f3:e2:18:b5:55:42:38:20:97:12:c5:f9:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33
X509v3 Authority Key Identifier:
keyid:C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:f5:c8:cc:21:44:df:1c:77:43:bd:10:f4:71:ce:d7:5f:2e:
95:b8:cc:2a:7e:e6:4a:96:31:25:ec:60:3d:36:2f:4d:8e:8d:
a0:57:9c:f5:f1:77:34:4c:00:e1:b8:4b:ec:e9:22:13:b3:fe:
72:74:41:f4:8b:b6:b8:f3:4b:7c:87:7a:2c:c6:a4:6d:4e:e7:
19:38:2b:65:50:d4:25:65:15:a5:58:50:e7:3f:dc:cd:cc:42:
c1:dc:7f:c7:1e:46:51:bf:79:d2:a9:dc:ab:09:53:f2:af:a8:
36:0c:9a:4d:ee:c1:45:f1:3b:b7:d0:53:7e:04:e7:9f:ea:04:
67:91:fb:f7:f4:3e:6f:2f:63:66:6e:1a:5c:d5:dc:c9:7d:a3:
84:10:cc:9c:d4:b1:61:09:80:de:d7:22:99:91:83:66:c9:00:
6a:d3:f0:c4:18:2e:c9:26:bf:d5:dd:a9:8d:3d:43:a8:59:c0:
dd:66:63:27:5a:06:2d:6e:ad:48:49:08:c7:82:92:35:b0:ff:
bf:45:ab:c5:31:10:12:cf:c5:61:cc:3a:b6:dd:cc:50:5a:df:
91:1b:9a:e3:18:c6:83:47:1b:9e:38:11:76:27:30:f3:d0:24:
d3:7f:bf:cc:fe:83:3f:76:e4:ff:be:b7:32:e9:75:33:9d:29:
e8:ac:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:46:31 2026 by rpki-client