This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
File:                     q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft (raw, json)
Hash identifier:          XpQ5KM7ihMikh9eZsi7UcOgjczu9SC4INBnaIKG3qyw=
Subject key identifier:   F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Certificate issuer:       /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial:       087A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
Manifest number:          0804
Signing time:             Sat 24 Jan 2026 20:16:11 +0000
Manifest this update:     Sat 24 Jan 2026 20:16:11 +0000
Manifest next update:     Mon 26 Jan 2026 20:16:11 +0000
Files and hashes:         1: 0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa (hash: NB7AtyJ/gv5jdRxwaS5k9Y+cLlR3AyiNu4aspWF9yiA=)
                          2: 3f63BadjGAUYs1x3v4BGWhdZApY.roa (hash: tkPlWwXkwcu1oG6vW9aQalv5LL5xGga44ht1lPbEm40=)
                          3: 3o0MyGsph19QMioV8dAY38XyrUc.roa (hash: umOyiAyCMz6ZOB8ugCBEa2klieiuAsNSjRS3bcRXhko=)
                          4: 4T7hYy9R_gAPqja_uuLgoJCAcrE.roa (hash: QtGMxl+HFh5aMEuZ0sYHbmxReOl1vspkRkUoCc8Uq1g=)
                          5: 5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa (hash: vvplqjRtyDKlQoipChhhpH5hF9AumMJ25Z2F6CIx3Ww=)
                          6: 88dWmlI19qyWt2XW84Qm9g3a7lM.roa (hash: 55hAf7LVBaSU6FF/o58mzxfoknoy6+GPfHvjsN+IbDI=)
                          7: GIG8ZdyB5-c-1FoFLP4Ft_6LUJc.roa (hash: 4oBckO6paU72uWlQ+WBdkPSJ5BEE5JF4HeLlE/nNLLU=)
                          8: HkDv6JRmv3EUd0VuTcitV8iuAoc.roa (hash: ZLa5vFMilTLvMaHqpus8c0iR++yiqKOTufQvKaJhc7I=)
                          9: I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa (hash: Gba91SUvxGLQxat7+zKgk0aaFNGCHgI8m38yJgXpn3g=)
                          10: LrDQUDQhMEFoCs9fICylNFhe7C8.roa (hash: Fqh0M1J163IHLpVJ5y3GP71aMdX4Ro56qfgBCjSs69w=)
                          11: NqPoQSZZ4x4VcAJRTM0_ZIBWIc0.roa (hash: x4fWI7aJqKfK4EReYWkxiMYa3/Zm5/TNfNV3Qs48hSY=)
                          12: QmspA3o7EFmJUCDnLzODvmUWYB4.roa (hash: UrSR6CmDgr//cqTlkRevhIXCWr0eQetrrcLdair8v28=)
                          13: TQeU6wh8rfeYXSvna9sswcCjVuU.roa (hash: LT+qWXLS643Fc8KRgOY6t2pG3S7loOypQI0vSIGdPnY=)
                          14: XnF1O1tH17U8vavVryrpuRod5Bw.roa (hash: y3Qkt+7T0dpoSq61aviYDCfynRnDkEIu6UX/3q4znlE=)
                          15: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (hash: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4=)
                          16: dJpQtzndugIaMgKpkejUNi8lrZ0.roa (hash: nZlSzvE0stUK/grdixuxy9Ws4R/l340poF1OTnaXyZg=)
                          17: ffQedrZ__zOr9Kh_lmDecV09cVY.roa (hash: lDAZ686aBzLfXPTD0B8tadH4tII2dljEkHzs84KD01U=)
                          18: lEuDNkwq4gnXhdcbA0Q2VC12ndA.roa (hash: 9RP4YrOGY9ORX0seTrO07h9sco8W8UTLEiI+xKZsSTw=)
                          19: luycyQCVnCSeD4L7Alh2HW7K8WE.roa (hash: NKeSwfVC6MnpCu1V8tuFvgPHdMm3NDSYpXHpT7g9wMc=)
                          20: o626lk6kU65aHOXqgfxmubwtLOk.roa (hash: JoYElnku35E7GuOzrfNMYseTGS1epI/0LyHXeQUW4UU=)
                          21: ogod4tREKKVUZJhHB4WjUpzplkE.roa (hash: R9MnN7pJfp5ko72gvks4bfv/8xa8aDgc/apRlRi2pbI=)
                          22: q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl (hash: tqt1HVBDJs/iFKN0TGebEJGxCqVAAcUVGNNXq1jRJbA=)
                          23: qph_IFR3oKkcveb27M5eZ1xyRxk.roa (hash: VFGcAzUTJfdPA9guAnWBUwVPumt1YYSt1Q3PGwIWXpg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 04:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
        Validity
            Not Before: Jan 24 20:16:11 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F0E17ABFCC5CFF6401BBC9F49F2C6398CC507D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:31:ee:85:bf:d6:ad:e7:34:1c:85:d0:c0:
                    79:d7:0b:33:9c:bc:10:5d:53:1a:da:6a:4b:93:5c:
                    79:25:02:49:e6:06:ad:25:43:85:00:df:14:85:b4:
                    a4:2c:67:ff:34:04:a6:f6:e3:10:23:1d:03:47:5e:
                    fd:0f:f5:8c:69:67:91:92:16:28:ed:14:a3:8b:23:
                    db:76:2f:53:2f:8a:54:78:81:f6:1e:2d:62:c2:cb:
                    15:9f:80:e9:c2:7e:ae:63:10:7b:25:72:16:85:1d:
                    ee:72:66:0a:d6:63:3c:76:38:3c:70:2f:ea:06:e1:
                    26:cc:73:4c:8b:5a:c8:19:98:68:b3:fb:1e:a3:f1:
                    11:4d:b3:06:7d:30:87:4e:d2:98:fa:f2:54:0b:23:
                    36:e4:c8:31:df:fa:18:f9:be:4c:60:66:d5:59:9d:
                    77:f4:09:4e:ce:c2:81:cb:35:f7:42:54:87:c2:f4:
                    99:93:67:80:7b:37:60:d6:c4:94:a8:77:e8:0e:65:
                    e0:22:3b:71:83:5e:4c:0e:7c:0d:95:83:7a:c5:d1:
                    3c:3e:f0:c1:d9:f1:9e:e4:15:4b:60:e7:a7:c2:2d:
                    38:1d:f5:80:46:cd:ae:e0:48:d7:4a:1b:e4:c4:9a:
                    65:48:93:8c:f6:7f:f2:27:59:4c:cd:a6:34:98:e8:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
            X509v3 Authority Key Identifier:
                keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:99:07:83:a7:73:d1:c4:db:88:a5:11:86:e4:14:68:84:95:
         0b:79:32:6a:05:20:a9:7b:32:4c:d0:a9:b9:99:b2:aa:85:78:
         24:bf:e4:0f:81:64:9b:de:5e:9d:42:38:0e:1f:96:23:85:61:
         3b:19:e1:dd:d9:5b:11:a8:36:98:e0:a9:81:8e:3d:1e:51:bd:
         b1:8e:43:c1:3a:95:c9:d7:42:ed:44:d9:35:4f:c8:89:d0:dd:
         25:65:9e:db:e5:19:e7:5f:3c:a7:a7:34:34:df:a2:fa:63:d2:
         6a:33:ea:c8:f8:b8:a9:09:05:1f:d3:ea:ec:47:91:67:31:42:
         01:09:8a:a5:3c:1f:60:e6:4c:3b:02:41:22:b2:6d:8a:cb:bc:
         1f:97:21:cf:84:61:a9:ec:c2:ad:66:67:17:0d:d7:69:ce:c7:
         ec:fc:43:c5:ef:88:fc:27:c7:5b:b6:48:7b:ee:46:03:17:20:
         35:79:cd:dc:28:1c:a1:9a:5a:c0:8f:7a:36:35:17:16:d4:30:
         98:a0:6e:73:55:f3:b8:d7:38:3c:3e:5d:cd:e2:3d:d7:e4:42:
         e6:d0:3e:6d:d1:19:4f:03:75:36:6f:fb:98:39:be:55:d6:ab:
         8c:be:33:6b:2f:cb:ca:c2:dd:28:cd:d3:b2:6e:99:90:30:99:
         06:21:74:a3
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICCHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF
RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNjAxMjQy
MDE2MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwRTE3QUJGQ0M1Q0ZG
NjQwMUJCQzlGNDlGMkM2Mzk4Q0M1MDdEOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8jjHuhb/Wrec0HIXQwHnXCzOcvBBdUxraakuTXHklAknmBq0l
Q4UA3xSFtKQsZ/80BKb24xAjHQNHXv0P9YxpZ5GSFijtFKOLI9t2L1MvilR4gfYe
LWLCyxWfgOnCfq5jEHslchaFHe5yZgrWYzx2ODxwL+oG4SbMc0yLWsgZmGiz+x6j
8RFNswZ9MIdO0pj68lQLIzbkyDHf+hj5vkxgZtVZnXf0CU7OwoHLNfdCVIfC9JmT
Z4B7N2DWxJSod+gOZeAiO3GDXkwOfA2Vg3rF0Tw+8MHZ8Z7kFUtg56fCLTgd9YBG
za7gSNdKG+TEmmVIk4z2f/InWUzNpjSY6LOPAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU8OF6v8xc/2QBu8n0nyxjmMxQfZswHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh
VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO
L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3EtMG9fOHdFRGpZRExFSmhW
SlZXSzh4dTlGdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDI
mQeDp3PRxNuIpRGG5BRohJULeTJqBSCpezJM0Km5mbKqhXgkv+QPgWSb3l6dQjgO
H5YjhWE7GeHd2VsRqDaY4KmBjj0eUb2xjkPBOpXJ10LtRNk1T8iJ0N0lZZ7b5Rnn
XzynpzQ036L6Y9JqM+rI+LipCQUf0+rsR5FnMUIBCYqlPB9g5kw7AkEism2Ky7wf
lyHPhGGp7MKtZmcXDddpzsfs/EPF74j8J8dbtkh77kYDFyA1ec3cKByhmlrAj3o2
NRcW1DCYoG5zVfO41zg8Pl3N4j3X5ELm0D5t0RlPA3U2b/uYOb5V1quMvjNrL8vK
wt0ozdOybpmQMJkGIXSj
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:08 2026 by rpki-client