This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft File: RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft (raw, json) Hash identifier: xdXqEvPl3aHdvpP2O7d/xjnWB3THC6kFnpW668nne8o= Subject key identifier: EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3 Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B Certificate serial: 0DCB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft Manifest number: 0DA9 Signing time: Fri 05 Dec 2025 10:05:57 +0000 Manifest this update: Fri 05 Dec 2025 10:05:57 +0000 Manifest next update: Sun 07 Dec 2025 10:05:57 +0000 Files and hashes: 1: FYcm3-BAzLarrqeCYV2whY0U-zo.roa (hash: BaTk+IlRTMk3VliwXqlPH52YkxVtp5DBAOqd4jq6OiU=) 2: RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl (hash: WtI2k8aSk4+7zNDva7nXjha74UZpGKQ7bT+FNnOUKu4=) 3: TsN0H5pD6Qm0_O0vCqm-6LmqAwg.roa (hash: QK6bO3POqwYLqN6of1UT1LdwgPFXVK0OJbizi519XWY=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B Validity Not Before: Dec 5 10:05:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EBA3972CCF2AC197E586C0AD8B740DC36C79B1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:70:15:e8:47:0b:5c:cf:90:8c:df:cd:69: 20:52:4c:f0:94:21:ba:af:0c:c8:7d:b3:9b:43:3f: a9:ba:1e:ea:bc:53:ef:72:c0:4f:fc:bb:b9:9a:63: 79:52:fb:a7:80:e8:c1:45:c6:9f:2b:43:84:a0:c5: 20:e4:5a:c2:1f:e2:2f:06:cf:d2:d6:16:05:26:af: e6:d6:76:af:7b:84:98:e9:6d:b6:84:92:6e:0b:b1: f7:2a:ab:94:42:e0:f3:c1:28:a4:7d:ce:c5:f8:f3: 9f:b6:1e:78:f0:7f:9b:f2:1d:4e:23:b0:22:0b:cf: 90:b5:e3:4f:ab:e9:1e:9b:c3:da:13:ce:3b:20:c2: 56:9c:d7:48:31:f2:1c:f3:95:6e:63:09:be:69:92: fa:07:ca:5d:c5:72:72:26:72:b5:f9:f5:4b:ac:40: b1:5a:53:c3:7b:be:8c:5e:cd:fb:81:9a:aa:3f:f3: de:98:2d:3e:77:8f:d9:20:67:13:31:1f:47:ad:a1: 87:11:a7:34:8c:72:b1:03:28:9b:b8:7d:4b:28:ed: 0c:37:e8:ea:75:bb:56:19:d8:b9:76:70:39:cc:11: 35:de:13:3d:c1:36:5b:5b:5e:7f:8f:7e:b9:4e:b7: a4:aa:a5:25:16:70:65:b2:40:fa:01:44:f0:f8:7c: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3 X509v3 Authority Key Identifier: keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:51:18:75:6a:6c:fc:47:48:a9:89:24:35:eb:75:bc:17:e7: d1:f7:ee:ce:7a:b3:b3:e5:db:d9:2e:c7:b7:ab:fb:e2:cd:3e: 52:2d:63:1d:f3:4e:37:09:e7:52:d4:02:25:d0:5d:1f:65:88: f2:15:dd:3b:c9:ec:d2:a7:14:bb:1b:e9:bd:1f:1e:53:c7:0d: 9b:75:ba:b4:06:2d:f3:65:a4:34:49:99:cd:0c:72:92:1a:98: d0:32:1e:7a:73:08:6a:b3:97:40:0c:1f:4a:3e:7f:35:f0:02: 49:8d:e5:d4:d8:38:31:14:22:6c:a0:d6:e9:66:12:03:7f:17: 92:ff:7b:70:0c:a9:82:5f:00:a6:f7:d2:af:55:76:72:e8:d8: f9:2c:a6:e9:1b:ec:3f:2f:d4:d1:e8:a0:0a:0e:0a:b9:96:59: c2:25:c1:4f:14:15:92:a7:73:cd:59:21:1d:53:a3:7b:e6:9f: f6:df:8c:e5:85:91:12:29:a7:83:03:22:af:ae:1d:85:cb:19: 25:3a:3b:26:ff:42:6a:11:7b:e3:cc:86:cc:a6:06:21:43:1f: fe:2f:b4:e4:b2:07:55:bf:16:7d:81:74:a8:d6:80:71:ca:ba: 10:ff:2e:16:e9:db:ac:e3:e8:4c:2a:4a:88:56:d5:5c:c1:16: 53:af:3e:39 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDY0 MEQ5ODhFQzgxNDZCQTQzMDU5NjAxMjEyMkQxQTFDRkMxQzM2QjAeFw0yNTEyMDUx MDA1NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCQTM5NzJDQ0YyQUMx OTdFNTg2QzBBRDhCNzQwREMzNkM3OUIxQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqHHAV6EcLXM+QjN/NaSBSTPCUIbqvDMh9s5tDP6m6Huq8U+9y wE/8u7maY3lS+6eA6MFFxp8rQ4SgxSDkWsIf4i8Gz9LWFgUmr+bWdq97hJjpbbaE km4Lsfcqq5RC4PPBKKR9zsX485+2Hnjwf5vyHU4jsCILz5C140+r6R6bw9oTzjsg wlac10gx8hzzlW5jCb5pkvoHyl3FcnImcrX59UusQLFaU8N7voxezfuBmqo/896Y LT53j9kgZxMxH0etoYcRpzSMcrEDKJu4fUso7Qw36Op1u1YZ2Ll2cDnMETXeEz3B NltbXn+PfrlOt6SqpSUWcGWyQPoBRPD4fJ0nAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU66OXLM8qwZflhsCti3QNw2x5sbMwHwYDVR0jBBgwFoAURkDZiOyBRrpDBZYB ISLRoc/Bw2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVS L1JrRFppT3lCUnJwREJaWUJJU0xSb2NfQncycy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUmtEWmlPeUJScnBEQlpZQklTTFJvY19CdzJzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVSL1JrRFppT3lCUnJwREJaWUJJ U0xSb2NfQncycy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ URh1amz8R0ipiSQ163W8F+fR9+7OerOz5dvZLse3q/vizT5SLWMd8043CedS1AIl 0F0fZYjyFd07yezSpxS7G+m9Hx5Txw2bdbq0Bi3zZaQ0SZnNDHKSGpjQMh56cwhq s5dADB9KPn818AJJjeXU2DgxFCJsoNbpZhIDfxeS/3twDKmCXwCm99KvVXZy6Nj5 LKbpG+w/L9TR6KAKDgq5llnCJcFPFBWSp3PNWSEdU6N75p/234zlhZESKaeDAyKv rh2FyxklOjsm/0JqEXvjzIbMpgYhQx/+L7TksgdVvxZ9gXSo1oBxyroQ/y4W6dus 4+hMKkqIVtVcwRZTrz45 -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:01 2025 by rpki-client