This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft File: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft (raw, json) Hash identifier: Ee9dlwIcSiEnFf5r1JjwIGfLHfnPdwmGiEUWQkOo8Bg= Subject key identifier: 16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53 Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Certificate serial: 09DE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft Manifest number: 09BB Signing time: Sat 06 Dec 2025 22:05:33 +0000 Manifest this update: Sat 06 Dec 2025 22:05:33 +0000 Manifest next update: Mon 08 Dec 2025 22:05:33 +0000 Files and hashes: 1: CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa (hash: WcHBhdw1aDCQHZvC1UpSrLR7f7Vmp/ID9Izo49GB2Iw=) 2: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl (hash: /u7T70dpYRgd2gZTQjfEpkalUGVwajViFHC22SNuZzY=) 3: VpWpZ3-90SJSDTBHGaCtNhfGcyU.roa (hash: AAP7YYbWtvheXfp1/imtwvmEkzGGM22+c5goFq55I6k=) 4: Z7O67lsGx3aARIFY9eOxvhRCwak.roa (hash: Hs949LOGE5pbIo9H2UFLzIVQo4zVj2WEGxy/5hBDHjA=) 5: gXhzYd6AcN0SBoeS3fYi7wRa6wA.roa (hash: 0qFzULhUi8BdMnWn+w7z2ay/URGQ6gl3EpRtNkDMwSk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Validity Not Before: Dec 6 22:05:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=16A02E28BF4A40F0FF09F6A3736B7CCB0D98A053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:39:97:85:9a:72:94:15:94:82:93:fb:e3: 8d:b1:87:83:b1:5c:39:90:19:88:f6:64:7d:f9:ba: f8:e7:f6:05:54:95:74:3e:9a:00:9d:ed:e2:ad:c8: 64:50:75:da:71:61:b7:9d:c6:9d:13:f8:29:56:a3: 02:f9:d6:e4:09:c5:5e:92:29:0a:c4:8d:5f:8d:e0: b2:d8:44:55:8e:86:63:d1:b9:04:2a:1a:f0:56:7a: 4d:d8:85:c9:c3:b2:43:2b:3d:82:03:9a:c4:d6:c4: 38:90:04:a9:ea:d7:0b:b0:a5:1d:1c:c5:83:e5:ce: 6b:29:d7:29:3d:9a:e0:c3:2f:b7:2f:01:a5:a2:b3: a2:eb:ea:ea:a2:2b:75:f4:76:f1:1b:60:ff:07:70: 1b:48:01:80:93:28:41:41:22:b5:81:46:11:2a:0a: 2f:7e:25:a3:4f:a0:2e:71:48:71:91:eb:bc:a2:eb: 4d:9d:45:6e:49:a7:45:48:b2:80:50:60:9e:4c:5f: 8f:32:f2:d3:10:6d:bb:3e:42:19:f0:49:a9:54:b8: 0c:14:97:b7:96:93:83:fa:f9:a9:4f:16:9f:c3:ba: a5:fd:4c:ea:ad:24:ed:e1:f7:3b:74:9c:4d:2b:74: 4b:f9:c6:66:8d:5f:d5:6a:dd:a1:7e:2c:17:65:8c: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53 X509v3 Authority Key Identifier: keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c2:34:d3:23:74:ba:15:e8:69:2b:20:2c:16:c4:21:4b:67: cd:c5:ae:ed:8e:6f:48:0b:69:20:e2:fe:03:c9:bf:d5:7d:c3: 64:17:5b:0c:f6:47:4d:79:10:2a:01:f0:1b:1e:dc:ff:82:69: 1c:f1:de:c8:c2:f0:1f:48:84:db:36:b8:5f:66:ce:5b:63:6b: bd:05:a4:92:59:0f:6d:a1:df:a2:89:0b:39:7a:83:88:d4:72: 09:b0:0c:3e:60:83:65:84:54:67:b6:ad:eb:e2:af:65:0f:67: d9:c9:77:a6:18:f4:a3:39:8f:96:b3:9a:bb:bb:bd:81:ff:68: bf:53:48:91:82:0e:0d:aa:ba:a2:29:3b:ca:df:5b:73:36:fd: e4:77:23:90:9c:77:47:78:ba:b9:dc:b1:63:4f:f9:82:cb:d2: 66:9a:d5:84:b7:8b:4f:98:43:f0:85:be:39:aa:b6:96:03:7e: a5:5d:0d:66:a0:33:d2:2f:c9:29:22:cd:68:26:e2:e9:7a:32: d8:95:bc:0a:0c:e4:e1:a0:d7:04:9b:5c:d4:cc:be:5e:c4:d6: 0f:3e:fa:ce:93:7e:16:d7:25:36:5e:00:b3:c4:1f:27:91:7c: 66:6d:ac:0e:9d:5c:0c:f0:a9:dc:2e:e4:45:91:9b:b9:26:19: 31:6e:9e:93 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNTEyMDYy MjA1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE2QTAyRTI4QkY0QTQw RjBGRjA5RjZBMzczNkI3Q0NCMEQ5OEEwNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSbTmXhZpylBWUgpP7442xh4OxXDmQGYj2ZH35uvjn9gVUlXQ+ mgCd7eKtyGRQddpxYbedxp0T+ClWowL51uQJxV6SKQrEjV+N4LLYRFWOhmPRuQQq GvBWek3YhcnDskMrPYIDmsTWxDiQBKnq1wuwpR0cxYPlzmsp1yk9muDDL7cvAaWi s6Lr6uqiK3X0dvEbYP8HcBtIAYCTKEFBIrWBRhEqCi9+JaNPoC5xSHGR67yi602d RW5Jp0VIsoBQYJ5MX48y8tMQbbs+QhnwSalUuAwUl7eWk4P6+alPFp/DuqX9TOqt JO3h9zt0nE0rdEv5xmaNX9Vq3aF+LBdljHKRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUFqAuKL9KQPD/Cfajc2t8yw2YoFMwHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw 5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvTGU4clBEcWFHMVBCYkJ4 dzVWRWExWkF5aFBzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEbCNNMjdLoV6GkrICwWxCFLZ83Fru2Ob0gLaSDi/gPJv9V9w2QXWwz2R015ECoB 8Bse3P+CaRzx3sjC8B9IhNs2uF9mzltja70FpJJZD22h36KJCzl6g4jUcgmwDD5g g2WEVGe2revir2UPZ9nJd6YY9KM5j5azmru7vYH/aL9TSJGCDg2quqIpO8rfW3M2 /eR3I5Ccd0d4urncsWNP+YLL0maa1YS3i0+YQ/CFvjmqtpYDfqVdDWagM9IvySki zWgm4ul6MtiVvAoM5OGg1wSbXNTMvl7E1g8++s6TfhbXJTZeALPEHyeRfGZtrA6d XAzwqdwu5EWRm7kmGTFunpM= -----END CERTIFICATE-----Generated at Sun Dec 7 04:46:25 2025 by rpki-client