This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          3z9wJn47q8IZO6nh326JHsvzNXcBAv32Q4nbHJzbNYw=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       14EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          1229
Signing time:             Wed 21 Jan 2026 20:14:58 +0000
Manifest this update:     Wed 21 Jan 2026 20:14:58 +0000
Manifest next update:     Fri 23 Jan 2026 20:14:58 +0000
Files and hashes:         1: 0EV9Waq_8Cf2qfNaIc6o1Ce1S7U.roa (hash: sYZtEfovuYI6eGXv2fre/IamCcA0mP3GieUs/1LghjE=)
                          2: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (hash: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas=)
                          3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: rwftn7BiHoIQ1xiFjBko0XaxtDKnfYOR6HORup7mCKU=)
                          4: 3hmGqCK4MfQ8p--8Knz4PLEsf4I.roa (hash: Nr/0iXAvSXdC3uAy1eKOiiSrzdWZjWoevPteFP22oDA=)
                          5: 45QmnsqdWOqNKxUfS08P7N5eAaw.roa (hash: FLKv90LqqAqfzW4ka4s7u8EQzLV4bNEoQgjjXQI2gvk=)
                          6: 4XfHzwZwVYmznZ5CCJNJ3lOjuEI.roa (hash: bR4SxyCJGeiJnHEswyFDofE+8/L6j5PhW5a8nMPotCE=)
                          7: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (hash: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408=)
                          8: 5lDuntK7WIoZk0sgHBscqc9RL6w.roa (hash: JX4YhXuPQCIu5bsUWEJxrMbMu1FR56LLIvAcdHfMem0=)
                          9: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (hash: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=)
                          10: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (hash: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=)
                          11: AFcm7pM8j5ejCMlAh-5j8-sOEbc.roa (hash: rW1JSOnwV0njBGop5mlA7nJRWoQdJziVa3ds1Te44jo=)
                          12: AY_50U5vPMRrl8HUUZiPEYGKnto.roa (hash: YyY5kyPyrcgvMnbVZJIfrN9oOpX8/EgZ0i89QU4P1aY=)
                          13: IS2LrxQcXYojyogdnit3pCUydBw.roa (hash: Tm+olkR0aKGzvS4I3+QR4fxXgoLKRa9UwrX3bgTbZEU=)
                          14: IVibC69SMkVPpFh5VWNu00soZzc.roa (hash: 4mj7nxLKJP4DJj4m3Jnj5IvmoJabF77XGRvFCH7i908=)
                          15: J50ylXuhdas2KjTervlhvK74aq4.roa (hash: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=)
                          16: O7EZ6j9V8cFiV9bX-EKBNkNR4Z0.roa (hash: 6gvliBqdvkpnm0vNb3P2yjHmVmhuLehtXWxM0187/5s=)
                          17: SbMnpJykKnyhfqRzZl_0BM-hFZs.roa (hash: 7rwtW35hihjLl/meUt1h7x94RGg2ejnRblaYIEqj3Ws=)
                          18: TaZFT0Z2aEjX_uleljN2tnB7EGA.roa (hash: PP4dO6TDk2s0Y0yKfFtB/rhNJMl15PM+18VPx1ms1bM=)
                          19: VPB09wxEXC4KnKhZaK6kgG661Nc.roa (hash: KuU6jWQ8Q2obz6ui/H5nMGWvB/CcAJ5QzqLfteaezWk=)
                          20: W75m8ClI26gr6u2_zu3FGxiwYc0.roa (hash: rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=)
                          21: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (hash: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=)
                          22: YRHxiXt805LQZ1d8Y2knw4hnN54.roa (hash: NISqLBuTIae3loWvUIDNUzIZtFP30DLGraPTFixxuSo=)
                          23: ZAiGeVD6b-J66tqwkFsZu7Vj4os.roa (hash: X0Wzw79OqatqPrnFcGfAjOJKu6KRgTGGpZArjlzvW0g=)
                          24: izVRQ7JLPoikKp5m-2SqYrAutUQ.roa (hash: HBf6u6pm8Xxecg4TSXECUcvkRPQipEAyoXUxPHY1K2M=)
                          25: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (hash: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=)
                          26: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (hash: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=)
                          27: t-6GfITkRkCZ0DXF1cPUbmXyp-o.roa (hash: 0dRYHzwpqJViiMUMNEZdGm56VlcO6Z1ptTcdyNhGmmc=)
                          28: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (hash: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=)
                          29: yzyNApNJEI49g97BvptpQk2LDZ4.roa (hash: TxxKBZ0glxRQ9j0CWLC8FZvuWkUNUyHuLNRZ5LUHCcQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 05:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5359 (0x14ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Jan 21 20:14:58 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:23:97:c0:e9:06:77:3b:75:d0:15:e1:52:f9:a0:49:0c:c9:
         bd:30:65:cc:4e:fd:42:8e:44:bb:a9:f8:4f:7e:bd:55:f8:49:
         bd:ad:28:74:ed:80:f6:e7:0d:7d:24:71:9c:b3:9a:55:60:f7:
         48:c8:38:b7:bc:15:f8:13:1c:d6:19:04:79:f4:cd:42:16:7b:
         79:fc:84:ac:a4:c0:0d:29:5d:65:b4:7a:f0:c0:e7:49:c4:65:
         f9:8a:58:72:d8:9b:18:00:57:c9:30:bf:c6:53:d9:3c:e9:d1:
         ec:96:34:39:4f:07:f7:31:2d:c1:58:a1:f4:d9:bc:c8:fe:ca:
         82:64:05:f2:76:01:1a:65:b8:92:d2:83:8e:84:24:b3:7e:3d:
         9d:29:6a:f8:5b:f7:99:d3:2c:61:56:d3:c0:e7:fe:75:d8:a3:
         50:c1:49:0a:7c:19:22:9b:18:39:23:10:58:af:1c:26:8c:2b:
         d2:42:d4:6b:62:40:cd:39:65:86:7c:8e:f4:42:a8:c6:f4:9d:
         0a:31:75:01:d6:16:91:cc:83:ba:dc:13:d4:82:32:b1:a6:70:
         d6:ce:52:e7:72:aa:94:c6:d5:67:be:2e:b9:6f:41:4b:c0:27:
         c2:e0:28:fe:83:8e:53:7c:38:b4:46:56:09:43:d5:74:be:f6:
         ac:38:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 01:44:22 2026 by rpki-client