This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
File:                     HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft (raw, json)
Hash identifier:          ORbItGvQOC/gtjRF12IwBt71yoBhzFiK002LaOVWuUQ=
Subject key identifier:   70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Certificate issuer:       /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial:       0DC7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
Manifest number:          0DB1
Signing time:             Sun 25 Jan 2026 10:15:33 +0000
Manifest this update:     Sun 25 Jan 2026 10:15:33 +0000
Manifest next update:     Tue 27 Jan 2026 10:15:33 +0000
Files and hashes:         1: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl (hash: WBvakOpUijqGqCDLwwJy8wzMShyUo3ANbRas0u0u/TI=)
                          2: J0pWNyrCWIY5k8mT7IBIHZfpIjs.roa (hash: WEYg+S9Vq+N0Tlw4O8T7f46l6ys1QRnoL/fR7I/cM2A=)
                          3: bi_TDVubJ9njomx5EkHYpLdeCa8.roa (hash: DS7gFBCUdGBOKW8JeVI0o+OQfH3D+ozjXhDup8iSXDI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 04:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3527 (0xdc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
        Validity
            Not Before: Jan 25 10:15:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=704A3696F22835EA5A0B27271E18C2E98E9AD438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:c5:a6:90:83:ba:c9:33:73:e8:69:43:f8:
                    bb:83:eb:a6:a2:4a:28:ce:b5:e4:27:a2:bb:07:2a:
                    49:83:99:dd:f9:1b:95:6d:13:a9:90:73:56:f8:81:
                    c5:bd:c3:b0:6c:18:54:d3:e6:64:20:84:17:a6:28:
                    7f:ab:4c:7b:33:a5:16:48:5b:83:a8:ba:17:9c:28:
                    33:bc:43:92:f7:f2:04:68:1e:f4:aa:4c:0d:d4:5d:
                    6a:35:02:99:3c:d1:93:2c:f2:4e:e7:d6:ea:82:ee:
                    93:fc:6c:65:da:9b:c4:3a:53:e9:11:4f:7b:30:09:
                    37:34:85:48:eb:34:e2:16:40:c0:a7:33:71:eb:98:
                    1a:73:75:d7:1a:f3:29:5b:6d:4d:6d:c9:43:00:4e:
                    12:72:9d:0a:0b:a5:82:31:0c:3e:0a:69:0d:df:54:
                    83:e7:ca:d8:96:e9:c9:1f:05:09:8d:b2:4b:3b:a8:
                    be:de:8d:2c:35:58:6e:37:05:08:d5:f7:b8:e8:f1:
                    c9:16:11:1e:a4:79:08:1f:19:74:47:ba:6e:1e:b1:
                    6d:fe:7c:c0:e7:23:cf:27:7d:cc:9d:b4:bc:cc:90:
                    ee:52:f1:1b:e2:49:27:77:22:2b:7f:c0:d0:a1:ef:
                    63:b8:cf:40:3b:69:0b:24:48:31:9a:db:1e:29:c3:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
            X509v3 Authority Key Identifier:
                keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:7f:90:c0:a1:1f:72:c2:75:2c:a2:ec:f6:bf:a6:32:2e:
         c9:6b:db:fe:ab:cd:14:a1:50:02:f8:9d:f1:42:8b:d7:4c:b7:
         05:f5:cd:83:b8:16:14:9f:d0:bb:c8:d9:a2:df:1d:93:72:73:
         af:5e:86:e7:29:76:74:ff:ed:4c:6d:c3:b7:5a:1f:a9:91:35:
         b1:67:c6:a7:1f:20:9d:96:5b:01:b7:ee:67:a6:fe:98:6b:91:
         f4:08:3b:e3:f3:93:3f:29:05:19:f7:be:47:e4:1f:4c:c9:78:
         0a:11:28:4f:e2:46:fb:c3:cf:e5:7b:7d:61:23:16:d4:10:27:
         8f:ab:72:8a:41:95:fb:02:eb:c4:90:03:88:b5:42:71:e8:9c:
         e8:e4:18:d2:99:0a:33:e5:8f:75:75:0c:56:f1:b7:94:89:6f:
         eb:cc:72:3f:5f:04:8f:e7:5a:d9:30:4e:fb:40:6b:2b:08:3c:
         00:c7:4d:a4:02:29:18:45:d5:18:f8:bc:65:b1:af:d1:61:af:
         10:26:13:da:e5:7d:df:0b:e0:2b:e7:84:34:73:d9:4b:cc:92:
         8c:5c:10:ee:29:f5:fd:42:ea:08:9f:4c:0d:43:61:58:50:e5:
         1f:67:7b:5e:44:5a:b1:6a:4d:44:b4:b4:87:71:ad:63:ea:b2:
         c9:bf:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:06 2026 by rpki-client