This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
File: lle2DWn8KCKE7gt1fS6_azqFWiA.mft (raw, json)
Hash identifier: 1+QZovoLXqn62f+uS6+LpE3nTCNlxyDOZygUdc47MYM=
Subject key identifier: BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED
Authority key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
Certificate issuer: /CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Certificate serial: 011B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
Manifest number: 0119
Signing time: Sat 06 Dec 2025 18:36:03 +0000
Manifest this update: Sat 06 Dec 2025 18:36:03 +0000
Manifest next update: Sun 07 Dec 2025 00:36:03 +0000
Files and hashes: 1: J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa (hash: K9uASHy/f7hYroRXCwiv67ugUzkSrVLCJa14XITQMSk=)
2: lle2DWn8KCKE7gt1fS6_azqFWiA.crl (hash: 4lntfX9z2RW5DUIufK7Lqad8UoQmmjonTSizYyDOJuY=)
3: t3tiofQcmqhcOlYiAmP2lMf7SZg.roa (hash: wxIS1O0DBxOT15cj9dI5yTt83r7GyCybe3RuLYKUpd0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 00:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Validity
Not Before: Dec 6 18:36:03 2025 GMT
Not After : Oct 7 15:30:24 2026 GMT
Subject: CN=BA02EBAC096F4FDC3F719853A61C31BEE1EFDBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:4a:9d:98:1f:cb:3f:c9:ff:c2:cb:4a:ee:
b3:dd:de:93:39:5a:ee:82:f8:6c:40:3d:28:61:35:
dd:51:11:7a:6f:71:ec:fb:29:9e:74:89:2a:13:5d:
a1:32:fe:cd:01:7d:f6:0d:47:9a:c5:75:96:5d:12:
5b:43:46:ac:1e:f5:18:03:79:97:98:32:05:82:b9:
01:ff:45:f4:0f:90:f7:08:27:81:8e:03:f4:c3:46:
11:92:de:5f:e2:79:84:23:cf:38:94:01:91:c8:5a:
c8:c0:fd:44:79:db:0a:08:c4:87:05:c8:d5:22:f9:
90:bd:9b:35:59:52:6e:72:ed:07:ce:b2:7f:63:73:
35:47:16:1b:49:78:59:e3:86:b6:d9:c6:2b:28:a8:
96:67:20:7e:a6:f2:98:9c:9b:d2:2c:59:42:56:2c:
e2:ef:bd:90:cb:82:67:e9:62:8f:83:83:81:7f:41:
84:c3:6e:f1:f2:7b:a7:ad:94:11:e9:0a:89:46:8d:
8d:69:d9:dc:43:bd:83:2a:c8:b1:c0:27:4d:c8:0a:
7b:5c:e1:32:67:a0:f0:79:04:70:3e:2f:f9:bb:9a:
c5:01:4f:b5:12:6f:8e:3d:3b:01:4c:0f:bf:8e:6e:
a3:96:6b:02:21:9f:c0:2a:ff:0c:0e:cd:0b:f3:a2:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED
X509v3 Authority Key Identifier:
keyid:96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:30:9c:9d:0f:97:aa:f9:91:aa:f2:7f:3e:05:96:81:e2:
7c:97:ea:a4:31:d4:d1:07:2f:54:02:e2:db:37:2e:e0:d9:b0:
6a:ff:2a:8e:46:c4:86:a7:cc:97:a7:31:61:d4:3c:dc:15:be:
10:e5:45:0a:9d:16:9c:de:1b:8d:dc:4d:73:75:c7:4d:8f:56:
79:7a:00:44:e1:f4:51:1a:d9:e1:9d:eb:08:33:45:56:ff:7c:
ff:d6:d0:d2:6a:42:f1:a9:7a:3d:b1:c7:40:47:1d:ce:1f:f7:
06:e6:9e:94:14:b0:fc:1d:43:e4:c3:5b:f0:47:97:bd:1a:6f:
e3:88:3d:1b:33:49:b2:51:14:52:bc:f5:fe:82:4e:39:08:26:
60:7a:0d:4c:07:52:40:50:e2:0a:36:1a:17:21:f6:d9:ef:56:
2a:c7:7f:66:24:0e:15:80:4f:5c:62:a9:d8:44:f3:4d:00:5b:
3c:66:f2:82:f8:93:ce:33:a2:93:a6:77:35:03:04:c0:48:bc:
1b:77:be:90:db:4a:4e:e4:5a:1a:64:39:8e:b0:c2:e7:fa:d3:
49:80:c4:40:82:53:ff:4e:54:2a:24:85:4d:b0:6c:d4:25:74:
2b:42:db:74:1e:e3:e2:ed:3f:4d:14:82:c0:63:ea:cd:3d:8d:
52:5f:f0:66
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY1
N0I2MEQ2OUZDMjgyMjg0RUUwQjc1N0QyRUJGNkIzQTg1NUEyMDAeFw0yNTEyMDYx
ODM2MDNaFw0yNjEwMDcxNTMwMjRaMDMxMTAvBgNVBAMTKEJBMDJFQkFDMDk2RjRG
REMzRjcxOTg1M0E2MUMzMUJFRTFFRkRCRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo90qdmB/LP8n/wstK7rPd3pM5Wu6C+GxAPShhNd1REXpvcez7
KZ50iSoTXaEy/s0BffYNR5rFdZZdEltDRqwe9RgDeZeYMgWCuQH/RfQPkPcIJ4GO
A/TDRhGS3l/ieYQjzziUAZHIWsjA/UR52woIxIcFyNUi+ZC9mzVZUm5y7QfOsn9j
czVHFhtJeFnjhrbZxisoqJZnIH6m8picm9IsWUJWLOLvvZDLgmfpYo+Dg4F/QYTD
bvHye6etlBHpColGjY1p2dxDvYMqyLHAJ03ICntc4TJnoPB5BHA+L/m7msUBT7US
b449OwFMD7+ObqOWawIhn8Aq/wwOzQvzojChAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUugLrrAlvT9w/cZhTphwxvuHv2+0wHwYDVR0jBBgwFoAUlle2DWn8KCKE7gt1
fS6/azqFWiAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy9s
bGUyRFduOEtDS0U3Z3QxZlM2X2F6cUZXaUEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2xsZTJEV244S0NLRTdndDFmUzZfYXpxRldpQS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1pVU08vbGxlMkRXbjhLQ0tFN2d0MWZTNl9h
enFGV2lBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAMuuMJyd
D5eq+ZGq8n8+BZaB4nyX6qQx1NEHL1QC4ts3LuDZsGr/Ko5GxIanzJenMWHUPNwV
vhDlRQqdFpzeG43cTXN1x02PVnl6AETh9FEa2eGd6wgzRVb/fP/W0NJqQvGpej2x
x0BHHc4f9wbmnpQUsPwdQ+TDW/BHl70ab+OIPRszSbJRFFK89f6CTjkIJmB6DUwH
UkBQ4go2Ghch9tnvVirHf2YkDhWAT1xiqdhE800AWzxm8oL4k84zopOmdzUDBMBI
vBt3vpDbSk7kWhpkOY6wwuf600mAxECCU/9OVCokhU2wbNQldCtC23Qe4+LtP00U
gsBj6s09jVJf8GY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:21:45 2025 by rpki-client