This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
File: 0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft (raw, json)
Hash identifier: mHLKM9uLxCK//nr9MIArD7kIhx1UVaQGvNa7vKEeRa0=
Subject key identifier: 77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Certificate serial: 02CA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
Manifest number: 02C1
Signing time: Sun 25 Jan 2026 09:46:41 +0000
Manifest this update: Sun 25 Jan 2026 09:46:41 +0000
Manifest next update: Tue 27 Jan 2026 09:46:41 +0000
Files and hashes: 1: 0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl (hash: G95b0itNfbtC9LQ6QYPAJxJEGyZqgpmj9dAe2M23AT0=)
2: P1ZKyfvag6UsPC4dNJOSlY3e4jI.roa (hash: 1vRlxS13uFPFd7r4WDxgL7pRnrmfLKWCBZB3Vu33Hnc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 23:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Validity
Not Before: Jan 25 09:46:41 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=770707B2FDD87DCEE7497AC682964243F898389A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:b9:82:cf:c5:d4:72:69:c6:f5:70:48:14:
0a:c1:74:e9:f2:9a:34:17:2b:3b:04:30:4a:0c:da:
27:91:c6:e5:6f:35:35:03:da:31:3c:e1:53:24:31:
c5:97:ee:50:f9:02:71:04:88:08:11:9c:6e:b8:e8:
d9:e6:8c:93:54:a2:d9:0a:3e:ed:37:ca:07:85:14:
3a:90:de:5b:6a:0f:21:d3:f8:a0:22:02:51:c5:58:
f2:35:7a:16:0f:b0:c3:4d:ed:2f:41:9b:ec:b0:30:
47:14:ad:f6:0f:ac:97:42:6f:f7:6c:c0:60:56:2b:
7a:0b:91:e0:a2:6f:82:6d:4d:59:02:59:88:01:50:
b2:28:e5:97:cd:a3:8c:09:68:0d:84:d7:b4:30:2b:
82:3b:68:5e:13:3d:c9:6f:6d:bd:c3:8c:0d:3e:6f:
bd:61:6c:7e:97:65:0a:5e:01:7d:66:47:26:37:af:
1a:44:61:0c:43:93:00:e2:38:1f:c5:d6:37:42:49:
a9:cd:bb:30:1e:a8:1c:b5:3a:f7:96:bb:e2:07:fc:
a9:0b:e0:01:de:9f:e3:51:dd:57:71:bd:15:81:71:
da:60:5b:a7:2e:0e:e5:2d:04:60:d7:c6:39:44:95:
84:a1:47:85:7c:dd:08:2c:5c:9d:93:45:78:7e:e1:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
X509v3 Authority Key Identifier:
keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:85:46:44:ba:32:a1:c1:61:54:97:25:54:b5:38:67:6f:85:
8e:63:4d:34:72:b2:06:4f:42:4c:0e:8f:92:c0:3b:0f:05:26:
58:d8:9d:ee:e6:ed:cd:32:dd:ea:b7:aa:00:cf:6e:c4:c4:7e:
9a:66:7c:7b:8f:f9:1e:d7:17:7b:a8:53:50:87:70:2a:91:0b:
f2:58:af:47:44:60:1f:d2:54:ac:b3:77:d8:f2:a6:54:be:c4:
f7:fd:2b:3e:30:ea:3f:90:c2:c0:4a:2b:e8:21:38:19:f1:6e:
5e:8e:81:0b:b2:f4:31:6a:5f:ec:c5:34:1f:07:d0:4b:18:e7:
15:42:45:74:56:ac:40:a1:9e:fb:fa:7e:03:5e:e0:73:82:ed:
a9:25:aa:7f:9d:a0:c4:38:ce:1d:83:b0:71:3b:87:7d:7c:ba:
50:81:2d:f2:7d:9e:ba:67:98:e9:25:18:62:d3:e1:45:20:6c:
0e:6c:bc:e9:93:3a:24:ca:5b:fa:64:90:1b:6d:62:dd:c8:08:
ce:6b:2f:55:53:ad:6b:18:a7:d6:b0:0a:75:a7:d1:47:a5:b0:
45:81:ef:88:33:86:52:22:c4:6a:d1:fc:8a:3c:e9:55:6e:2b:
22:76:26:f6:f1:14:38:61:0c:5f:45:f1:f6:4a:a4:ac:cd:56:
0c:cd:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:08:37 2026 by rpki-client