This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft
File:                     soOb96bGsX58_LNzSjbA6Yw3obc.mft (raw, json)
Hash identifier:          fABy21Mg94sFG+XcYNWb5plUrGodUBvbC+1pSJCl3nM=
Subject key identifier:   AE:9E:C0:AA:46:A1:DB:F2:E8:12:6E:C4:88:77:32:2E:E9:CB:F9:F8
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Certificate issuer:       /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial:       07E8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft
Manifest number:          07C3
Signing time:             Sat 22 Nov 2025 20:02:19 +0000
Manifest this update:     Sat 22 Nov 2025 20:02:19 +0000
Manifest next update:     Mon 24 Nov 2025 20:02:19 +0000
Files and hashes:         1: A29BWVB1SQkWBuHgcVn3iMFx6fM.roa (hash: JoNf8t3wBbhrgcTUqf2TfyO8pCwzRI1chHcc21JgIZA=)
                          2: soOb96bGsX58_LNzSjbA6Yw3obc.crl (hash: Y7YTs8UGDvdsoQtKqo6SJimCxfcKrFLW6GxvWpOSymA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
        Validity
            Not Before: Nov 22 20:02:19 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AE9EC0AA46A1DBF2E8126EC48877322EE9CBF9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:be:25:25:de:99:78:8b:0a:d5:6c:33:05:
                    3f:cd:4b:88:7f:cc:bc:83:ae:19:22:8f:da:ac:c0:
                    33:e5:be:06:9b:30:21:b9:5f:79:89:ac:31:6d:93:
                    fb:96:56:15:27:65:e6:ab:fa:af:d4:f0:83:fa:44:
                    09:e8:4b:79:4c:53:3a:d1:7f:10:14:d4:72:d3:d6:
                    d8:ff:d7:cf:c6:77:ac:37:76:81:ab:0f:52:f9:48:
                    4a:13:11:09:84:12:df:2d:c4:2e:50:20:71:81:8d:
                    f0:07:4c:ed:f3:fe:fb:f2:29:62:4b:35:9a:f1:e7:
                    d6:1b:51:74:95:04:88:99:ac:10:1b:e7:a2:1f:b9:
                    3b:f3:8f:c1:2a:43:00:61:17:08:44:e5:49:ee:77:
                    53:8e:c4:68:f5:e4:4f:f7:c0:f6:5e:51:9e:83:1e:
                    8f:c2:7f:eb:42:bf:83:f7:7e:99:74:a0:76:12:d2:
                    7e:71:50:0d:0b:89:fa:72:e2:6e:b1:05:2b:e5:f0:
                    f2:71:e3:2c:04:58:a3:1a:17:23:15:5f:5a:9e:5e:
                    4c:0f:2a:22:0f:d2:c0:9e:23:77:f7:e1:f1:8f:13:
                    b6:c0:c3:8f:57:ec:c0:3c:c2:a9:2a:1f:72:ec:6b:
                    fb:f5:91:a0:4d:2b:31:25:39:c5:64:2e:5f:b1:a3:
                    44:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:C0:AA:46:A1:DB:F2:E8:12:6E:C4:88:77:32:2E:E9:CB:F9:F8
            X509v3 Authority Key Identifier:
                keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:e2:6d:c3:b4:99:b7:db:a2:2c:af:24:2d:09:b2:40:6a:
         93:32:80:c0:db:47:72:cd:aa:dd:3f:02:f9:6e:70:cf:45:e9:
         fc:a0:6d:67:57:e6:9c:04:ed:71:4e:2d:6e:15:60:99:48:f7:
         38:f8:54:2b:43:96:d6:21:bc:26:6d:56:e6:4b:5d:db:14:8c:
         03:13:75:c8:e4:15:f1:85:64:32:7c:a9:95:8b:e9:8a:5e:34:
         ae:1c:dc:a0:1b:d2:ff:e3:ce:c8:9e:47:7f:ba:2a:eb:f4:44:
         ef:e0:46:2d:4e:80:47:ce:23:91:a8:fd:c4:a3:8b:87:6f:ff:
         75:ba:63:17:e2:d1:98:79:cf:eb:36:2b:c1:6b:0b:13:9f:8f:
         09:d5:a6:54:72:ab:de:fb:47:fd:9b:d4:a6:0e:f9:ae:7f:7e:
         7d:d7:34:0b:10:79:e8:67:b0:d5:8e:e7:7e:97:50:3e:f8:95:
         63:ca:b1:7d:b7:ea:1e:cb:bd:7a:1d:a6:58:be:21:61:02:e9:
         53:4c:0e:21:70:6f:51:d7:ee:ad:76:fd:ec:fb:26:05:5b:86:
         96:f3:7e:67:47:86:6a:84:17:13:44:1d:8d:a4:fb:e4:b3:d9:
         4a:51:bd:ff:f7:9d:43:16:20:b0:33:18:d3:6f:88:84:9f:3a:
         38:e9:99:01
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjI4
MzlCRjdBNkM2QjE3RTdDRkNCMzczNEEzNkMwRTk4QzM3QTFCNzAeFw0yNTExMjIy
MDAyMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFOUVDMEFBNDZBMURC
RjJFODEyNkVDNDg4NzczMjJFRTlDQkY5RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfKr4lJd6ZeIsK1WwzBT/NS4h/zLyDrhkij9qswDPlvgabMCG5
X3mJrDFtk/uWVhUnZear+q/U8IP6RAnoS3lMUzrRfxAU1HLT1tj/18/Gd6w3doGr
D1L5SEoTEQmEEt8txC5QIHGBjfAHTO3z/vvyKWJLNZrx59YbUXSVBIiZrBAb56If
uTvzj8EqQwBhFwhE5Unud1OOxGj15E/3wPZeUZ6DHo/Cf+tCv4P3fpl0oHYS0n5x
UA0Lifpy4m6xBSvl8PJx4ywEWKMaFyMVX1qeXkwPKiIP0sCeI3f34fGPE7bAw49X
7MA8wqkqH3Lsa/v1kaBNKzElOcVkLl+xo0SRAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUrp7Aqkah2/LoEm7EiHcyLunL+fgwHwYDVR0jBBgwFoAUsoOb96bGsX58/LNz
SjbA6Yw3obcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRS
QS9zb09iOTZiR3NYNThfTE56U2piQTZZdzNvYmMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NVTUFUUkEvc29PYjk2YkdzWDU4X0xO
elNqYkE2WXczb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AJ5r4m3DtJm326IsryQtCbJAapMygMDbR3LNqt0/AvlucM9F6fygbWdX5pwE7XFO
LW4VYJlI9zj4VCtDltYhvCZtVuZLXdsUjAMTdcjkFfGFZDJ8qZWL6YpeNK4c3KAb
0v/jzsieR3+6Kuv0RO/gRi1OgEfOI5Go/cSji4dv/3W6Yxfi0Zh5z+s2K8FrCxOf
jwnVplRyq977R/2b1KYO+a5/fn3XNAsQeehnsNWO536XUD74lWPKsX236h7LvXod
pli+IWEC6VNMDiFwb1HX7q12/ez7JgVbhpbzfmdHhmqEFxNEHY2k++Sz2UpRvf/3
nUMWILAzGNNviISfOjjpmQE=
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:09:41 2025 by rpki-client