This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
File:                     -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json)
Hash identifier:          iE6OwcNtef/dfJ6kTB6O8hQpm50rdkAGwzzJXi1rSCc=
Subject key identifier:   8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Certificate issuer:       /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial:       0501
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
Manifest number:          0500
Signing time:             Wed 21 Jan 2026 14:16:01 +0000
Manifest this update:     Wed 21 Jan 2026 14:16:01 +0000
Manifest next update:     Wed 21 Jan 2026 20:16:01 +0000
Files and hashes:         1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: gLiEzdZe11T6Tzchw0KxZ22yPYd31xqkAFRVP941cmE=)
                          2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 20:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
        Validity
            Not Before: Jan 21 14:16:01 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69:
                    98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81:
                    2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d:
                    d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7:
                    8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63:
                    3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58:
                    ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43:
                    86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71:
                    32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69:
                    71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10:
                    3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82:
                    e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c:
                    8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b:
                    6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa:
                    6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef:
                    bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7:
                    04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
            X509v3 Authority Key Identifier:
                keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:21:3d:38:00:e4:a7:b9:67:bd:e9:81:bf:5a:ff:c2:b4:e2:
         0c:4f:8d:27:b4:a4:1b:54:95:03:fd:39:58:34:0e:18:cd:ff:
         27:50:54:72:13:cb:28:0f:f1:b6:c6:91:8e:75:d4:62:d5:99:
         de:b1:04:e1:26:a8:e5:2d:d2:0e:1c:e1:b9:4f:6c:90:c9:31:
         23:b4:77:bd:78:27:27:e4:43:db:26:7e:18:25:d1:09:37:75:
         52:a6:bc:f2:85:45:3e:07:2c:2a:3b:06:68:af:93:f4:3c:c3:
         31:f4:ba:03:e0:b8:36:c8:dd:a0:66:fc:1c:0d:4f:9c:93:fd:
         6f:0e:0e:45:b3:c8:72:30:d7:cc:46:24:b6:91:15:f0:5a:8e:
         cb:0a:37:b1:b2:5d:59:60:ee:98:c7:ec:ce:c0:66:7b:e7:be:
         14:3d:64:cf:df:a7:00:21:e6:d0:88:3a:59:aa:6d:68:56:0b:
         98:12:99:02:c6:4a:04:66:98:18:89:64:26:e6:e7:5e:0b:b9:
         93:50:5c:38:65:33:f0:36:f7:79:bf:ba:69:ba:41:fc:3f:45:
         89:5f:a0:b5:74:f3:04:fc:8a:e2:f8:e8:03:4d:82:3d:91:ef:
         82:67:bf:f5:8a:2b:4b:72:9e:31:43:a3:e4:ab:82:d5:da:c2:
         e8:3a:39:8b
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD
NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNjAxMjEx
NDE2MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhFOEQzMzk5RjE3RUND
NEZCMEVGRDM5MjlGNjQ4MjJGNUVERkVFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFiG23+XRP3zdTPfOfaZjHCpOnOr8ee7OINs6ogSufav9ju2yZ
xNnMerx7jdkNbMOYicA78aRbT/NY946x11U5Z2SiB9vgs+ToYzsXizsz4u6W/fbW
6WGGWMqCuRh8IfjwEvf7VZu+Q4ZLEHNBKyFqUYBUTmt9cTIj3LY/NLldBlrcd/gw
aXHZqR4qresWb6I4CqUlED8kJw8Jc4aLMdzUFtYtguakhH9U/pAM1OBVe1FNDI8W
5rwCrTHTRaygL1DLm25aatKl9wbB8U0U7kHIqmxd32E+n6AdkifhkMlO77tVgbmI
NYwnuomzFISi9wR1L7BccJxAQWc4XbdP7rj5AgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUjo0zmfF+zE+w79OSn2SCL17f7jswHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs
knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP
Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLy1jWXR3V295V1VGV1pCUXNr
bmpGM2NUWUtaMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp
IT04AOSnuWe96YG/Wv/CtOIMT40ntKQbVJUD/TlYNA4Yzf8nUFRyE8soD/G2xpGO
ddRi1ZnesQThJqjlLdIOHOG5T2yQyTEjtHe9eCcn5EPbJn4YJdEJN3VSprzyhUU+
BywqOwZor5P0PMMx9LoD4Lg2yN2gZvwcDU+ck/1vDg5Fs8hyMNfMRiS2kRXwWo7L
Cjexsl1ZYO6Yx+zOwGZ7574UPWTP36cAIebQiDpZqm1oVguYEpkCxkoEZpgYiWQm
5udeC7mTUFw4ZTPwNvd5v7ppukH8P0WJX6C1dPME/Iri+OgDTYI9ke+CZ7/1iitL
cp4xQ6Pkq4LV2sLoOjmL
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:46:37 2026 by rpki-client