This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft File: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft (raw, json) Hash identifier: lOc4n7816ylswNfESgYQnprdVA/IYvWiY8qD9kpqZuk= Subject key identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 Authority key identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 Certificate issuer: /CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Certificate serial: 22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft Manifest number: 21 Signing time: Sun 25 Jan 2026 17:45:49 +0000 Manifest this update: Sun 25 Jan 2026 17:45:49 +0000 Manifest next update: Sun 25 Jan 2026 23:45:49 +0000 Files and hashes: 1: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl (hash: yzenfaQxrMvSMxrIF88dqSga5sqmuevG+NvqjyF5t2w=) 2: rPdWtUsi2UAHVk-l8KJCbvrCOD8.roa (hash: oTS/FYxx55v1DjeUunKoD2Yztyue5p9rzC+R5qtA5ek=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Validity Not Before: Jan 25 17:45:49 2026 GMT Not After : Jan 15 15:30:19 2027 GMT Subject: CN=3E91C832C1A0B7FDFAE6CC51A25A5D2291436279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:f1:ec:9f:17:01:a4:cd:e1:b8:ac:d8:66: c5:09:3d:cb:c0:5e:b7:22:ae:46:46:92:3e:18:90: 64:6f:48:f7:42:51:7f:d2:21:55:8f:63:f3:13:b6: f1:0b:bd:ae:ec:4e:77:68:a3:6b:44:33:20:83:fc: 43:d6:3e:fb:f9:f0:d0:57:92:c3:b3:e4:da:d1:cd: 0a:21:31:fb:11:e3:31:1d:96:a9:6f:2c:8f:62:8b: 7e:78:6e:0d:f9:df:93:b8:84:17:43:c7:02:81:a2: 05:83:48:fd:69:12:76:0f:de:12:bb:54:c9:a3:ea: 2e:d7:31:de:24:e9:da:0a:b0:78:eb:55:09:37:de: a7:c3:d5:f0:53:f8:07:46:d2:57:3f:26:70:14:ac: e6:86:f5:6c:a0:fc:74:50:8d:2e:5e:20:b6:43:f5: 68:71:7c:0e:06:aa:66:b3:10:2a:f4:13:f1:7c:8f: d8:9f:a6:88:71:d8:37:a3:8c:8a:dd:0e:46:eb:df: 29:92:77:75:24:a7:56:5d:47:fb:bd:3d:38:2b:33: b6:3d:e2:38:a1:fe:cb:a1:d0:ee:2d:63:bd:3b:f1: 9e:1d:f4:8f:df:08:8a:4a:30:fa:67:6d:b6:38:6d: ef:70:b4:9c:4d:8d:dd:29:8a:27:1c:33:e9:43:8a: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 X509v3 Authority Key Identifier: keyid:46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:33:22:74:f2:f9:8c:6a:af:0a:1d:66:24:fd:14:3f:3a:55: f2:6f:9f:5d:b6:77:e9:71:c3:ba:da:35:95:c7:26:bd:5e:25: 95:ce:62:17:39:f9:a6:be:74:c4:1c:0d:66:7e:4e:29:e0:9f: 2c:4c:af:c5:ad:fb:78:6e:06:30:98:8a:f9:85:ad:4b:7a:8c: f8:f7:42:97:96:ee:c8:51:fd:29:60:96:59:b0:77:60:1c:8c: 93:c4:02:88:be:21:7f:02:54:47:82:4a:35:21:19:49:33:77: de:b2:cd:26:d4:c9:1f:be:6b:3e:ea:95:14:73:6d:e0:ae:e1: d3:4b:96:22:12:06:ea:6f:87:d4:be:1f:ef:11:04:cb:b9:6f: 79:bd:be:a1:0c:4e:27:f5:70:fa:32:32:64:cd:d2:15:ba:d8: e4:8c:95:ca:d3:33:53:65:ec:a3:7c:f9:e4:6d:41:ab:d0:4b: 2f:9e:76:7c:a1:c5:c7:c2:40:56:f4:28:95:e6:66:3a:e3:fb: 3c:eb:b9:b3:9e:b5:a2:25:d2:b0:bb:c9:8b:11:fd:51:be:fd: 95:b0:35:90:36:d5:b4:da:d4:78:cb:0b:c4:58:e2:ba:5e:cb: 02:43:1a:98:11:6f:29:13:6d:47:4f:ae:e0:df:01:be:15:cb: 59:dd:e1:90 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NjNB QUY5REY5RjY1NThDNjBFNDgxNkRBMDI0ODU2MkY2OTAwNTA3MB4XDTI2MDEyNTE3 NDU0OVoXDTI3MDExNTE1MzAxOVowMzExMC8GA1UEAxMoM0U5MUM4MzJDMUEwQjdG REZBRTZDQzUxQTI1QTVEMjI5MTQzNjI3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPJ8eyfFwGkzeG4rNhmxQk9y8BetyKuRkaSPhiQZG9I90JRf9Ih VY9j8xO28Qu9ruxOd2ija0QzIIP8Q9Y++/nw0FeSw7Pk2tHNCiEx+xHjMR2WqW8s j2KLfnhuDfnfk7iEF0PHAoGiBYNI/WkSdg/eErtUyaPqLtcx3iTp2gqweOtVCTfe p8PV8FP4B0bSVz8mcBSs5ob1bKD8dFCNLl4gtkP1aHF8DgaqZrMQKvQT8XyP2J+m iHHYN6OMit0ORuvfKZJ3dSSnVl1H+709OCsztj3iOKH+y6HQ7i1jvTvxnh30j98I ikow+mdttjht73C0nE2N3SmKJxwz6UOKWV0CAwEAAaOCAgkwggIFMB0GA1UdDgQW BBQ+kcgywaC3/frmzFGiWl0ikUNieTAfBgNVHSMEGDAWgBRGOq+d+fZVjGDkgW2g JIVi9pAFBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQU5SQVlT L1JqcXZuZm4yVll4ZzVJRnRvQ1NGWXZhUUJRYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUmpxdm5mbjJWWXhnNUlGdG9DU0ZZdmFRQlFjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZUy9SanF2bmZuMlZZeGc1SUZ0 b0NTRll2YVFCUWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu dHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cTMidPL5jGqvCh1mJP0UPzpV8m+fXbZ36XHDuto1lccmvV4llc5iFzn5pr50xBwN Zn5OKeCfLEyvxa37eG4GMJiK+YWtS3qM+PdCl5buyFH9KWCWWbB3YByMk8QCiL4h fwJUR4JKNSEZSTN33rLNJtTJH75rPuqVFHNt4K7h00uWIhIG6m+H1L4f7xEEy7lv eb2+oQxOJ/Vw+jIyZM3SFbrY5IyVytMzU2Xso3z55G1Bq9BLL552fKHFx8JAVvQo leZmOuP7POu5s561oiXSsLvJixH9Ub79lbA1kDbVtNrUeMsLxFjiul7LAkMamBFv KRNtR0+u4N8BvhXLWd3hkA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:36 2026 by rpki-client