This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
File: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft (raw, json)
Hash identifier: ORbItGvQOC/gtjRF12IwBt71yoBhzFiK002LaOVWuUQ=
Subject key identifier: 70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 0DC7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
Manifest number: 0DB1
Signing time: Sun 25 Jan 2026 10:15:33 +0000
Manifest this update: Sun 25 Jan 2026 10:15:33 +0000
Manifest next update: Tue 27 Jan 2026 10:15:33 +0000
Files and hashes: 1: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl (hash: WBvakOpUijqGqCDLwwJy8wzMShyUo3ANbRas0u0u/TI=)
2: J0pWNyrCWIY5k8mT7IBIHZfpIjs.roa (hash: WEYg+S9Vq+N0Tlw4O8T7f46l6ys1QRnoL/fR7I/cM2A=)
3: bi_TDVubJ9njomx5EkHYpLdeCa8.roa (hash: DS7gFBCUdGBOKW8JeVI0o+OQfH3D+ozjXhDup8iSXDI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 04:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3527 (0xdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: Jan 25 10:15:33 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=704A3696F22835EA5A0B27271E18C2E98E9AD438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:c5:a6:90:83:ba:c9:33:73:e8:69:43:f8:
bb:83:eb:a6:a2:4a:28:ce:b5:e4:27:a2:bb:07:2a:
49:83:99:dd:f9:1b:95:6d:13:a9:90:73:56:f8:81:
c5:bd:c3:b0:6c:18:54:d3:e6:64:20:84:17:a6:28:
7f:ab:4c:7b:33:a5:16:48:5b:83:a8:ba:17:9c:28:
33:bc:43:92:f7:f2:04:68:1e:f4:aa:4c:0d:d4:5d:
6a:35:02:99:3c:d1:93:2c:f2:4e:e7:d6:ea:82:ee:
93:fc:6c:65:da:9b:c4:3a:53:e9:11:4f:7b:30:09:
37:34:85:48:eb:34:e2:16:40:c0:a7:33:71:eb:98:
1a:73:75:d7:1a:f3:29:5b:6d:4d:6d:c9:43:00:4e:
12:72:9d:0a:0b:a5:82:31:0c:3e:0a:69:0d:df:54:
83:e7:ca:d8:96:e9:c9:1f:05:09:8d:b2:4b:3b:a8:
be:de:8d:2c:35:58:6e:37:05:08:d5:f7:b8:e8:f1:
c9:16:11:1e:a4:79:08:1f:19:74:47:ba:6e:1e:b1:
6d:fe:7c:c0:e7:23:cf:27:7d:cc:9d:b4:bc:cc:90:
ee:52:f1:1b:e2:49:27:77:22:2b:7f:c0:d0:a1:ef:
63:b8:cf:40:3b:69:0b:24:48:31:9a:db:1e:29:c3:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:7f:90:c0:a1:1f:72:c2:75:2c:a2:ec:f6:bf:a6:32:2e:
c9:6b:db:fe:ab:cd:14:a1:50:02:f8:9d:f1:42:8b:d7:4c:b7:
05:f5:cd:83:b8:16:14:9f:d0:bb:c8:d9:a2:df:1d:93:72:73:
af:5e:86:e7:29:76:74:ff:ed:4c:6d:c3:b7:5a:1f:a9:91:35:
b1:67:c6:a7:1f:20:9d:96:5b:01:b7:ee:67:a6:fe:98:6b:91:
f4:08:3b:e3:f3:93:3f:29:05:19:f7:be:47:e4:1f:4c:c9:78:
0a:11:28:4f:e2:46:fb:c3:cf:e5:7b:7d:61:23:16:d4:10:27:
8f:ab:72:8a:41:95:fb:02:eb:c4:90:03:88:b5:42:71:e8:9c:
e8:e4:18:d2:99:0a:33:e5:8f:75:75:0c:56:f1:b7:94:89:6f:
eb:cc:72:3f:5f:04:8f:e7:5a:d9:30:4e:fb:40:6b:2b:08:3c:
00:c7:4d:a4:02:29:18:45:d5:18:f8:bc:65:b1:af:d1:61:af:
10:26:13:da:e5:7d:df:0b:e0:2b:e7:84:34:73:d9:4b:cc:92:
8c:5c:10:ee:29:f5:fd:42:ea:08:9f:4c:0d:43:61:58:50:e5:
1f:67:7b:5e:44:5a:b1:6a:4d:44:b4:b4:87:71:ad:63:ea:b2:
c9:bf:8f:3c
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ5
MkJFMEFDRjk4ODdCMUE4MTkyODc1Q0ZFNzMyMjM4REUzMjJBOTAeFw0yNjAxMjUx
MDE1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwNEEzNjk2RjIyODM1
RUE1QTBCMjcyNzFFMThDMkU5OEU5QUQ0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY6sWmkIO6yTNz6GlD+LuD66aiSijOteQnorsHKkmDmd35G5Vt
E6mQc1b4gcW9w7BsGFTT5mQghBemKH+rTHszpRZIW4OouhecKDO8Q5L38gRoHvSq
TA3UXWo1Apk80ZMs8k7n1uqC7pP8bGXam8Q6U+kRT3swCTc0hUjrNOIWQMCnM3Hr
mBpzddca8ylbbU1tyUMAThJynQoLpYIxDD4KaQ3fVIPnytiW6ckfBQmNsks7qL7e
jSw1WG43BQjV97jo8ckWER6keQgfGXRHum4esW3+fMDnI88nfcydtLzMkO5S8Rvi
SSd3Iit/wNCh72O4z0A7aQskSDGa2x4pwwvHAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUcEo2lvIoNepaCycnHhjC6Y6a1DgwHwYDVR0jBBgwFoAUHZK+Cs+Yh7GoGSh1
z+cyI43jIqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RV
L0haSy1Dcy1ZaDdHb0dTaDF6LWN5STQzaklxay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSFpLLUNzLVloN0dvR1NoMXotY3lJNDNqSXFrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RVL0haSy1Dcy1ZaDdHb0dTaDF6
LWN5STQzaklxay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn
oH+QwKEfcsJ1LKLs9r+mMi7Ja9v+q80UoVAC+J3xQovXTLcF9c2DuBYUn9C7yNmi
3x2TcnOvXobnKXZ0/+1MbcO3Wh+pkTWxZ8anHyCdllsBt+5npv6Ya5H0CDvj85M/
KQUZ975H5B9MyXgKEShP4kb7w8/le31hIxbUECePq3KKQZX7AuvEkAOItUJx6Jzo
5BjSmQoz5Y91dQxW8beUiW/rzHI/XwSP51rZME77QGsrCDwAx02kAikYRdUY+Lxl
sa/RYa8QJhPa5X3fC+Ar54Q0c9lLzJKMXBDuKfX9QuoIn0wNQ2FYUOUfZ3teRFqx
ak1EtLSHca1j6rLJv488
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:06 2026 by rpki-client