This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
File:                     639Ki3shDbkgjtWANXBF5Zcd4NM.mft (raw, json)
Hash identifier:          rq9Fh2BHGflGBz4TtVss1IQrucm5XpMtp9g5W/4Uzxk=
Subject key identifier:   C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
Certificate issuer:       /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Certificate serial:       054B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
Manifest number:          0541
Signing time:             Sun 25 Jan 2026 10:46:47 +0000
Manifest this update:     Sun 25 Jan 2026 10:46:47 +0000
Manifest next update:     Tue 27 Jan 2026 10:46:47 +0000
Files and hashes:         1: 639Ki3shDbkgjtWANXBF5Zcd4NM.crl (hash: lOSKFEYL1j0WqPZq25eG3RKTWe3mE6CaZTZJethbAe4=)
                          2: ALxxmI-MtTvV7so9NokBSyZ9pNc.roa (hash: bfyUeHCmQJ48LfOm63XlAVSRh9tG9IAeNiGx7Io5itQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
        Validity
            Not Before: Jan 25 10:46:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C6A29DDF6672B4B2BCE6751586815CB88C94C3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:fa:15:8c:15:9a:4d:1c:8b:ed:2f:a6:30:
                    71:6e:32:0a:3f:9e:03:fa:73:5b:3c:c1:6f:14:e8:
                    07:0c:56:1f:ee:4e:7e:71:31:a1:af:e5:b7:3d:c9:
                    ba:2e:17:47:e1:d0:f8:0e:22:06:73:6a:8e:5f:c4:
                    43:cb:58:6a:9a:a5:1f:08:b4:e1:bb:60:67:97:99:
                    93:b5:40:a2:41:02:0c:d3:99:cc:19:34:5c:4f:11:
                    d5:66:75:21:59:c9:34:34:d2:f5:ea:95:70:2a:9b:
                    12:bf:29:9a:66:58:be:b6:e6:61:56:10:ea:9e:87:
                    12:b4:44:1b:64:6c:a3:ad:8b:78:4d:4a:4e:fd:f7:
                    e9:a6:16:bb:20:7b:ac:33:37:49:bd:bd:18:b2:e6:
                    45:fe:8c:4f:08:e7:34:6f:b7:92:18:8f:74:1c:c9:
                    8d:11:e8:7a:b1:7a:ba:14:0d:5a:43:89:16:b6:75:
                    3f:5c:bc:c2:e7:13:53:47:12:1f:12:93:7d:90:bd:
                    3e:c3:6d:70:09:f5:e2:5f:5e:d0:03:49:6a:a9:8d:
                    07:7c:f1:2c:3b:a7:95:d3:09:df:93:b2:66:8e:2f:
                    06:30:cf:78:34:29:89:46:bc:f3:22:3a:b1:43:2d:
                    1d:71:8e:38:d8:67:db:b4:02:24:76:0f:76:15:e9:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
            X509v3 Authority Key Identifier:
                keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:46:bc:93:ff:4a:44:99:26:f5:dd:e7:1b:02:0b:32:0d:
         b8:c2:1d:c7:79:5a:b0:cc:5a:cb:23:f8:a9:bf:d1:06:25:82:
         32:7f:d3:b6:a0:7a:7d:30:c0:89:74:57:b1:e4:5d:fe:14:8f:
         e6:2c:08:6e:cf:f0:f5:4c:29:bf:5e:b0:0a:53:5b:ca:1b:77:
         05:2a:8c:cd:34:50:73:79:f0:06:b2:31:a0:3a:06:54:b6:da:
         32:30:fc:36:ce:e2:b6:c0:f0:68:3b:6d:7f:be:27:ad:92:09:
         d4:b6:c4:dd:14:c7:77:5a:4d:44:8b:c5:ed:a3:89:4a:1c:93:
         6b:29:0f:54:06:82:cf:7e:d9:6d:71:f3:1c:bd:5c:8d:c1:16:
         85:7b:18:cf:6a:e2:99:e3:a6:4f:57:98:a3:0d:58:d2:91:cb:
         0a:5a:00:9c:68:08:ad:64:7a:fa:bc:8a:9d:c9:82:21:fd:bb:
         1c:03:cd:0c:1b:ee:e2:06:4c:a6:b8:d8:59:39:64:a6:77:89:
         0a:12:8a:e3:3b:ee:6b:0f:79:71:73:de:64:ec:5b:16:94:82:
         f4:ad:04:09:0c:3d:7e:f4:54:3a:81:ff:5c:fa:bd:be:95:29:
         c2:19:8b:ad:69:81:ec:66:40:10:9a:1a:f6:84:e6:4f:05:07:
         c3:78:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:52 2026 by rpki-client