This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
File:                     ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft (raw, json)
Hash identifier:          BhwaPr47UPSmRxZ502kX2SRnzpZwecGEg9OqKMhaYQg=
Subject key identifier:   C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B
Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
Certificate issuer:       /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Certificate serial:       0A61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
Manifest number:          0A39
Signing time:             Wed 11 Feb 2026 20:49:29 +0000
Manifest this update:     Wed 11 Feb 2026 20:49:29 +0000
Manifest next update:     Fri 13 Feb 2026 20:49:29 +0000
Files and hashes:         1: 7VK53hYm7g5VkOPkeGES_54hVJI.roa (hash: k+OtCx1T1ouk+q8NbbCJvYUIt7orWPEyyny85aJVIzQ=)
                          2: YPrfDOvbaWwTBQh83FDQR4bljig.roa (hash: mdZ/pS667HT7nasTrAeRj0hweBDwP5zLS4KhdRCdXac=)
                          3: lj6DsilVinvpnvvZUxejuA78C_A.roa (hash: LjwB/DtkQZoPwU8SEFcd7nl8GoskZuUkWg4ABzzUwM0=)
                          4: m5ujHyJTb5O-0_KuO5n4cwDP7fM.roa (hash: lCYHImXXGM7H15knCuGW8+trMfcGbhHQaSf3x8ukTsM=)
                          5: ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl (hash: /D+DzfPmujALLrYxgWy9tzWqi55hzj7P8OU+Odm5Z/8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657 (0xa61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
        Validity
            Not Before: Feb 11 20:49:29 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C49319113B6E1A87D587DA0E050FFBEDE7F0E10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:26:23:7e:72:ac:59:ab:82:b7:b4:48:3c:
                    db:45:de:b1:97:2b:5f:e8:58:b2:e2:90:6a:30:a3:
                    ef:8a:13:46:5d:5e:4d:56:b3:ce:28:a1:1f:c5:1f:
                    d6:5d:d7:4f:1d:db:f0:e5:f5:f3:f6:a9:3f:bb:30:
                    a7:e0:32:0b:19:59:60:c8:c2:57:53:fc:04:4d:72:
                    0d:3f:22:a1:25:7d:e4:51:f9:f2:b2:36:93:c1:44:
                    5d:80:97:5d:48:e3:6f:4a:28:b5:d3:26:74:a0:2e:
                    92:92:15:9d:a6:90:41:21:1c:e3:b6:ce:15:8a:40:
                    40:a8:70:64:f0:d7:d5:f7:80:93:d3:73:05:af:2a:
                    84:22:d6:7c:60:65:1a:e5:2a:9c:95:ac:bc:55:9b:
                    dc:5f:c6:9a:f2:bc:bf:04:d3:f3:35:38:3e:9f:ba:
                    02:bc:7c:dd:83:63:9a:c5:c0:28:26:b5:9e:76:56:
                    07:bf:8f:8e:fd:c5:8b:99:2a:99:d9:dc:ef:68:45:
                    35:e8:4a:87:1c:11:5d:27:27:f3:f5:9b:1c:e0:91:
                    a8:80:42:51:17:c9:d6:85:d3:e1:13:d5:fe:8f:9b:
                    d7:2b:ce:31:ff:02:b4:0b:be:8d:dc:39:5c:f8:c7:
                    3d:62:b2:4b:41:fc:76:62:a0:cf:03:18:90:29:54:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B
            X509v3 Authority Key Identifier:
                keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:6d:9e:2f:f1:33:fb:bc:59:c2:0b:89:c2:0a:84:4d:5f:
         1f:c5:35:d9:ea:96:fd:75:01:94:c3:1b:dd:a8:aa:8a:53:49:
         23:8a:6d:a2:c5:94:05:c2:cb:d7:65:6d:34:c5:6f:6d:8c:70:
         f4:01:c0:10:3a:0c:42:f6:d1:59:92:f4:87:9b:c7:ea:91:57:
         62:62:d3:f4:e3:df:06:6c:f1:93:ed:a3:1b:bd:9c:8f:fa:7f:
         4a:56:74:08:3c:08:e0:8d:c0:e1:b0:bd:f8:5d:e0:13:e0:7e:
         02:3f:52:c9:fd:99:65:15:28:e4:20:26:7f:0b:e3:58:c9:b1:
         21:29:8d:1f:f2:c1:9e:2a:de:a5:e5:00:83:35:32:16:c8:c6:
         08:3c:5b:bd:65:3f:ac:b0:8a:c1:92:af:e2:a0:98:74:f3:e4:
         e7:47:c4:b2:7c:33:b1:82:6c:d0:c5:58:22:20:eb:0b:5b:f3:
         62:fb:34:e9:f0:2a:95:f4:25:91:93:e8:fe:8a:29:dd:80:12:
         c0:a5:08:f9:83:84:f7:b8:2d:5a:89:a9:88:7a:a2:c4:bb:25:
         5d:4c:df:5c:72:2f:89:93:49:d5:00:12:de:fb:82:f3:b8:77:
         e7:dc:5f:df:4f:37:b2:f1:db:f8:23:30:da:c0:33:63:45:e0:
         c6:75:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:33 2026 by rpki-client