This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
File: y6ZO6ni6NlZLwgRW4BonQEwJolo.mft (raw, json)
Hash identifier: 3A2s+sQYlKfdquHJARvkow307PtB7qvU3Jo73WOGxQk=
Subject key identifier: 68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79
Authority key identifier: CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A
Certificate issuer: /CN=CBA64EEA78BA36564BC20456E01A27404C09A25A
Certificate serial: 1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
Manifest number: 1A
Signing time: Fri 05 Dec 2025 08:04:58 +0000
Manifest this update: Fri 05 Dec 2025 08:04:58 +0000
Manifest next update: Sun 07 Dec 2025 08:04:58 +0000
Files and hashes: 1: y6ZO6ni6NlZLwgRW4BonQEwJolo.crl (hash: dwhS+N9gjVb17bVewVwPsnK5SNFBtmjp5CYiPPducXk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 15:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBA64EEA78BA36564BC20456E01A27404C09A25A
Validity
Not Before: Dec 5 08:04:58 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=689209AF1A3790BB55B4AB95466E1B856767FB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:93:ef:c8:58:ed:da:ea:7b:dc:75:de:5b:
bf:e4:0c:ab:7c:37:43:1c:c5:df:01:cf:c1:db:77:
89:2f:78:84:48:41:e2:6e:30:2e:ad:e3:e0:b9:68:
15:43:c9:6a:aa:83:cf:28:4e:9e:e6:de:d7:bc:21:
dc:a3:4a:f7:7b:b1:19:ea:50:3e:95:68:6d:b8:fa:
e1:8a:1d:4e:f2:f0:43:c2:f5:c4:1f:64:55:47:93:
a8:3e:a6:fb:9f:6d:d9:c4:03:01:15:31:69:d9:f4:
37:ae:4f:25:60:ea:bc:08:d9:b3:8b:d1:ce:cc:f6:
d7:10:ab:90:59:4e:9e:f1:80:cb:10:f5:d9:ca:ac:
a9:23:3f:60:59:0e:d6:11:4e:85:01:e0:64:83:f5:
a8:1d:f4:18:69:bd:28:4d:8a:eb:66:26:bd:9a:8c:
78:63:00:43:87:f5:5b:e8:b1:9f:6b:63:8c:4f:c9:
21:34:bb:4e:ce:c9:5b:71:24:e0:8d:52:f0:f2:f7:
44:01:d8:78:b0:cc:b6:a6:30:53:a5:40:d4:26:3d:
a4:bb:84:6c:6a:17:e0:3f:77:87:97:2b:5e:45:73:
5b:16:c7:d5:f6:2d:49:8d:9a:39:dd:87:be:fc:7b:
10:a8:a4:1b:a2:92:95:2a:2d:8e:74:d8:5d:b6:81:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79
X509v3 Authority Key Identifier:
keyid:CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:d1:50:b4:f9:a1:52:a1:57:96:20:94:64:ca:b5:43:d5:
4f:54:c7:40:eb:61:20:ae:b4:22:05:0f:47:ae:6b:e1:5c:16:
d5:dd:33:da:c1:dd:6c:19:a9:59:df:7b:1c:7c:4f:ae:79:4b:
63:09:6f:61:23:58:06:6e:72:02:a1:e5:47:20:0b:39:54:91:
e3:d9:a3:39:cd:f7:30:02:44:c9:d8:a6:2c:9c:98:a4:d0:f9:
04:08:43:a0:9c:c8:b6:83:c2:71:b3:f9:a1:1c:f8:d7:76:f0:
a9:ed:83:a5:55:80:ec:1e:33:bd:4c:d4:50:8b:9c:9b:cb:16:
e6:0f:5e:50:20:cb:53:3f:e4:f7:d1:9b:44:ff:af:d2:1f:52:
04:b5:8a:9d:8e:07:d5:fd:3b:55:2e:5d:94:ea:ca:c5:69:e8:
3f:a8:5c:34:2a:47:62:85:b7:26:49:ad:a2:13:c3:41:2e:bc:
e6:db:df:5c:de:dd:3c:7f:d6:b3:ee:5f:3b:8d:70:b2:f6:a1:
30:4b:8f:64:a1:96:b1:34:0b:5c:7a:b9:39:7a:28:70:9e:d5:
78:32:4d:07:06:60:58:56:a8:60:a8:d3:c0:d9:1f:ba:fd:aa:
8a:e0:71:fb:cc:56:18:3d:14:3c:7b:58:43:14:d1:03:8f:ed:
89:6b:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:57 2025 by rpki-client