This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft File: fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft (raw, json) Hash identifier: Oqf0IAL5HNugNpZD1nG08yNXaDnE77MSi3Nl2nOwJOM= Subject key identifier: 17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21 Authority key identifier: 7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B Certificate issuer: /CN=7E088F89A61632E17D919F943E97A09ABD03C93B Certificate serial: 0D8F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft Manifest number: 0D8F Signing time: Mon 15 Dec 2025 22:09:53 +0000 Manifest this update: Mon 15 Dec 2025 22:09:53 +0000 Manifest next update: Wed 17 Dec 2025 22:09:53 +0000 Files and hashes: 1: fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl (hash: criSvF3ZHDQ1fC25CGlCLlZCkdXvA+y8HMSjT8YmCyA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 06:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E088F89A61632E17D919F943E97A09ABD03C93B Validity Not Before: Dec 15 22:09:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=17D51F95C13970EFEF2C730991E36A0CD2112221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:c1:83:27:26:00:8d:2d:23:18:9b:b8:ff: 82:76:95:14:a0:a3:01:1a:94:de:38:f9:b7:ef:97: 3e:e0:76:13:c5:d3:0f:71:0c:e9:b6:b9:f1:98:c3: 92:11:d2:3a:19:ff:f7:89:ce:11:a2:3e:d7:22:57: 37:74:ea:e8:b2:44:71:8d:c2:69:b6:d8:bc:7c:5f: d7:3c:51:23:7b:a2:c6:f1:fb:22:6d:1a:85:ad:81: ae:d5:bd:f3:0c:3b:2b:e1:88:ca:57:5f:63:27:7f: 1d:f6:75:fc:dc:84:a0:64:34:83:5b:7b:c0:a7:e4: 25:d8:88:bb:a1:2e:ec:2c:ed:fc:7c:9e:61:b8:a9: d1:9b:b7:c7:d6:42:57:6b:b3:39:da:45:57:97:60: 5d:59:f1:e3:68:01:44:3f:73:8d:7b:33:88:5f:9d: fe:8a:a8:3c:b7:d4:b8:b4:5d:cb:6c:7f:52:d4:03: 63:35:b3:89:bc:2a:77:50:b5:e2:87:c1:16:00:51: 3d:fb:35:04:68:63:40:70:3e:07:b1:52:fa:98:f3: 0e:e6:d9:80:a3:1d:e5:b0:14:89:00:58:9f:0e:68: 3c:60:b2:12:5c:85:2f:09:10:2d:b3:78:57:7a:eb: 39:43:55:db:fd:ba:c5:46:8f:d2:2c:66:fa:63:89: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21 X509v3 Authority Key Identifier: keyid:7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:68:ff:ae:a9:6f:68:2b:a8:81:bb:a5:d1:36:ea:18:3e:81: 21:55:50:6d:04:e1:98:5b:fb:7c:7f:82:ea:61:50:16:62:a3: ee:15:b5:2b:20:8f:f3:02:13:10:82:44:9d:a4:f0:40:cc:05: 17:fc:6a:fe:b2:0e:bf:e4:79:c3:56:5e:3c:1b:21:9c:d3:ab: 62:91:a4:63:16:f4:5f:43:ce:f7:68:05:c8:a0:f5:9a:94:e3: 1b:ed:e9:44:b5:af:05:92:50:a8:e3:2d:ef:29:e2:20:13:9e: 26:98:a3:05:76:23:22:52:15:b7:85:16:a2:11:d0:a3:1c:67: 5e:88:8f:6a:a6:71:89:0e:b0:2b:69:aa:0a:61:3d:1f:1e:b7: 3a:73:f3:3b:82:54:ec:4e:11:f1:35:87:07:a6:47:21:a4:f0: 4d:55:80:e1:26:47:34:82:6e:0c:bf:e5:b9:55:4e:79:ff:25: 59:96:68:c9:34:6c:93:93:f5:58:65:50:11:ab:9e:f3:b9:f7: cb:8b:81:c6:35:23:8a:26:75:65:f7:d0:66:c3:18:67:60:40: 8e:c6:e9:7f:7e:67:88:13:d0:70:10:4d:3d:66:a4:0f:d8:d7: 43:99:8d:f8:db:6c:6b:0f:04:ef:a6:aa:8e:d1:6b:25:71:45: ed:ba:73:1c -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Uw ODhGODlBNjE2MzJFMTdEOTE5Rjk0M0U5N0EwOUFCRDAzQzkzQjAeFw0yNTEyMTUy MjA5NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE3RDUxRjk1QzEzOTcw RUZFRjJDNzMwOTkxRTM2QTBDRDIxMTIyMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjO8GDJyYAjS0jGJu4/4J2lRSgowEalN44+bfvlz7gdhPF0w9x DOm2ufGYw5IR0joZ//eJzhGiPtciVzd06uiyRHGNwmm22Lx8X9c8USN7osbx+yJt GoWtga7VvfMMOyvhiMpXX2Mnfx32dfzchKBkNINbe8Cn5CXYiLuhLuws7fx8nmG4 qdGbt8fWQldrsznaRVeXYF1Z8eNoAUQ/c417M4hfnf6KqDy31Li0Xctsf1LUA2M1 s4m8KndQteKHwRYAUT37NQRoY0BwPgexUvqY8w7m2YCjHeWwFIkAWJ8OaDxgshJc hS8JEC2zeFd66zlDVdv9usVGj9IsZvpjiS37AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUF9UflcE5cO/vLHMJkeNqDNIRIiEwHwYDVR0jBBgwFoAUfgiPiaYWMuF9kZ+U Ppegmr0DyTswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERUR1JP VVAvZmdpUGlhWVdNdUY5a1otVVBwZWdtcjBEeVRzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9mZ2lQaWFZV011RjlrWi1VUHBlZ21yMER5VHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9URFRHUk9VUC9mZ2lQaWFZV011Rjlr Wi1VUHBlZ21yMER5VHMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWj/rqlvaCuogbul0TbqGD6BIVVQbQThmFv7fH+C6mFQFmKj7hW1KyCP8wIT EIJEnaTwQMwFF/xq/rIOv+R5w1ZePBshnNOrYpGkYxb0X0PO92gFyKD1mpTjG+3p RLWvBZJQqOMt7yniIBOeJpijBXYjIlIVt4UWohHQoxxnXoiPaqZxiQ6wK2mqCmE9 Hx63OnPzO4JU7E4R8TWHB6ZHIaTwTVWA4SZHNIJuDL/luVVOef8lWZZoyTRsk5P1 WGVQEaue87n3y4uBxjUjiiZ1ZffQZsMYZ2BAjsbpf35niBPQcBBNPWakD9jXQ5mN +Ntsaw8E76aqjtFrJXFF7bpzHA== -----END CERTIFICATE-----Generated at Wed Dec 17 04:19:23 2025 by rpki-client