This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
File: MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft (raw, json)
Hash identifier: 826tUYn5/Czsx4Q09Ivu6RssBEsIJCrzI8lQfQstNMs=
Subject key identifier: 1B:C9:F6:3A:73:30:80:5E:48:E6:F9:07:D0:36:FC:78:07:6C:A0:31
Authority key identifier: 30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99
Certificate issuer: /CN=307E1DEA08C58B5FCEC8F57CBB774EEE8E515C99
Certificate serial: 0256
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
Manifest number: 0253
Signing time: Sun 07 Dec 2025 00:05:05 +0000
Manifest this update: Sun 07 Dec 2025 00:05:05 +0000
Manifest next update: Sun 07 Dec 2025 06:05:05 +0000
Files and hashes: 1: 4sPB_u7fbVKrz8PvJ2ANd5wmvN4.roa (hash: d22YNx89jY5XnBKXsXej+Z6EGmQRxBE0r5TbQJ3GCZc=)
2: MH4d6gjFi1_OyPV8u3dO7o5RXJk.crl (hash: rqWi8iUSMhgSnkJWuG2tJRipCwZIiQxtjlN5jBfCGxg=)
3: Sg5T9EB1MarDInUIhbPko52VS3o.roa (hash: e9ocAxS5rq4dSA0hejCpBmkwVoD5lcM3dG/p61jeJ/Q=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307E1DEA08C58B5FCEC8F57CBB774EEE8E515C99
Validity
Not Before: Dec 7 00:05:05 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1BC9F63A7330805E48E6F907D036FC78076CA031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:8b:9c:dd:35:6e:66:f6:40:24:9e:24:42:
a7:ae:c8:45:0b:e1:02:03:7e:8b:c1:d8:48:d0:a6:
3e:aa:a5:8a:69:53:a4:e7:13:de:7d:82:15:2b:cb:
6d:7e:94:ac:ef:fc:06:55:79:fc:9e:22:72:97:79:
f1:0f:dd:c8:05:fb:23:be:58:12:c8:88:85:3b:c6:
e3:25:50:56:1c:4a:2f:cb:55:9a:25:b7:4b:cd:68:
83:1f:d5:66:20:30:3b:c5:fb:45:01:ad:9a:11:0b:
70:7a:d6:6a:dc:c8:73:f5:14:11:e1:03:62:1c:60:
37:52:d7:4a:e4:e5:ff:c0:a0:40:54:6b:37:60:7f:
ad:25:57:5e:bd:d7:c6:82:1d:7d:7c:f5:62:4c:bf:
6f:78:8e:df:cb:71:f6:68:64:35:32:fc:ae:2f:e7:
96:68:7b:35:bc:10:92:fb:29:ea:eb:f3:88:da:80:
b8:1a:36:64:1c:f8:87:09:ae:f0:0b:e2:2a:6c:e7:
92:59:53:1a:1a:17:c7:d1:11:39:99:87:7a:50:06:
1b:41:dc:fc:c8:fe:5d:43:c1:ad:73:70:bb:b2:c1:
fe:8b:8a:d9:92:aa:5c:41:73:d6:e1:37:82:ed:fc:
54:1e:e4:0a:8b:2e:51:ca:e8:23:7b:fd:52:5f:9b:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:F6:3A:73:30:80:5E:48:E6:F9:07:D0:36:FC:78:07:6C:A0:31
X509v3 Authority Key Identifier:
keyid:30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:68:0c:7c:e2:f9:8b:44:d8:f4:1b:6b:15:dd:de:79:8a:1f:
4d:ce:92:5e:e9:a7:f3:19:a6:2a:7b:a8:53:c0:0a:c5:1f:e8:
e5:ce:c2:43:16:7b:a2:88:75:18:92:08:a1:05:18:00:0b:73:
da:87:75:23:49:b5:f7:95:e3:25:49:71:60:2a:88:13:1f:1a:
37:e4:28:c0:d1:24:a6:ef:ec:83:14:68:32:7b:85:80:60:9d:
30:e0:66:c0:9c:f7:99:e3:53:c0:40:44:a9:f3:4a:c0:55:e4:
b8:66:32:e7:a6:f2:1d:4a:77:73:03:8a:46:48:92:7a:77:ff:
7f:19:2e:bd:94:98:de:b0:ee:5a:47:22:1b:f0:3e:9c:58:cb:
d7:fd:ce:81:12:b4:c2:47:59:32:58:8e:5d:61:39:a1:3a:95:
f5:5a:b6:87:b9:1f:58:fa:4e:56:a2:47:4b:63:c6:58:58:d2:
85:ff:89:da:45:05:2b:ed:05:a0:cd:f2:95:fd:eb:41:4f:1e:
6d:92:5f:67:e9:b2:ea:ae:85:7e:6d:e6:91:01:d2:1a:66:93:
ce:f3:e4:81:3a:64:22:62:53:f9:95:8c:71:97:5b:8b:31:92:
03:26:be:54:47:a8:89:3c:79:1c:d0:8b:78:8d:2f:ce:67:eb:
9d:be:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:57 2025 by rpki-client