This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
File:                     -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json)
Hash identifier:          9zQytLYleYXvtST0eq9fJ+UEpyVMkOtPAFwZjwSvEMQ=
Subject key identifier:   8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Certificate issuer:       /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial:       0411
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
Manifest number:          0410
Signing time:             Sat 06 Dec 2025 23:04:47 +0000
Manifest this update:     Sat 06 Dec 2025 23:04:47 +0000
Manifest next update:     Sun 07 Dec 2025 05:04:47 +0000
Files and hashes:         1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: J61QwOu7fXUEVmVxWTTPBB+yLEBa3cIV5pv+zznfYXM=)
                          2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
        Validity
            Not Before: Dec  6 23:04:47 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69:
                    98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81:
                    2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d:
                    d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7:
                    8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63:
                    3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58:
                    ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43:
                    86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71:
                    32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69:
                    71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10:
                    3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82:
                    e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c:
                    8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b:
                    6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa:
                    6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef:
                    bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7:
                    04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
            X509v3 Authority Key Identifier:
                keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:7a:01:29:13:79:db:64:51:e1:e3:29:5a:6f:2c:d7:04:
         67:28:23:44:ae:ac:f7:2f:6d:64:e2:8f:b8:b3:cd:73:0b:5a:
         2c:38:fa:89:64:36:8a:cd:75:d4:ef:7d:8b:1a:9a:5c:2d:0f:
         1b:1d:42:fc:96:01:6e:8f:59:69:f0:ae:af:d3:6f:22:b6:db:
         9a:af:b8:63:f7:7f:75:c9:12:9c:13:83:51:ea:db:59:af:4d:
         e1:74:48:08:f7:37:fb:17:63:09:7d:0a:63:6f:b1:6a:1d:0b:
         c2:2a:37:25:0b:05:3d:73:17:43:11:75:92:ac:c3:65:38:4d:
         4f:b7:14:15:fa:be:f2:ae:5a:3e:ce:34:cc:1d:b8:9d:2a:0f:
         ab:ea:b4:a9:01:eb:24:48:3a:07:47:f7:c2:61:e5:db:ec:ef:
         b1:89:13:cd:e9:7b:37:bf:6e:a7:5f:16:04:dd:e1:18:db:1a:
         1e:82:d8:a2:62:d3:24:01:6d:01:37:07:2d:9e:da:fe:9d:5b:
         a5:87:d4:87:b3:d4:e4:84:59:9b:53:3d:aa:ac:71:6e:82:fb:
         eb:65:1d:87:a9:c4:52:04:c5:7e:56:b1:b1:d8:3b:dc:48:0d:
         3a:13:15:4d:74:14:e2:d0:79:8a:b6:20:ea:76:c9:94:83:bf:
         e4:c8:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:17:01 2025 by rpki-client