Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
File:                     WBiXiy0Iml896uCvAekzX03V1Lw.mft (raw, json)
Hash identifier:          P9jKUtromg7/0L4xep/RaZt9zsL3o9NWeUjWdi9o1xg=
Subject key identifier:   52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Certificate issuer:       /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial:       1315
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
Manifest number:          130E
Signing time:             Sun 09 Mar 2025 21:01:14 +0000
Manifest this update:     Sun 09 Mar 2025 21:01:14 +0000
Manifest next update:     Tue 11 Mar 2025 21:01:14 +0000
Files and hashes:         1: WBiXiy0Iml896uCvAekzX03V1Lw.crl (hash: uzbOuSq3lI+sIhRIH9kFohhCe4P3syuvANAwNBpeaMM=)
                          2: obGNcSJ3Tf91MbDiELC-CcpMAGc.roa (hash: yLIMYl4k/EvGS+pgHPJqC06iFFMNmlhemZu+hqKBXSs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4885 (0x1315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
        Validity
            Not Before: Mar  9 21:01:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5215ED98CD31BB59F8446F042620423EFBAD05FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:37:90:1f:00:39:a2:2f:90:c5:8d:74:3f:
                    44:df:2e:7b:c5:22:93:67:84:77:1f:8d:87:74:d7:
                    d9:d1:f9:8e:4d:b5:a5:0d:47:4e:51:ea:6e:15:77:
                    f8:8f:da:43:fa:9a:5d:48:9f:54:42:b3:da:b2:8e:
                    d7:c1:69:c9:f3:c4:10:55:0d:fa:4c:2a:e7:8c:6a:
                    6c:5a:81:be:dd:22:e8:a1:9c:d1:71:ac:68:cd:2b:
                    db:ce:fe:c7:fc:b3:45:ee:10:82:eb:54:b1:0c:f5:
                    7f:1f:fb:64:09:2f:a8:2f:82:22:78:c8:74:bd:d7:
                    87:05:b4:ef:57:6a:d3:d1:bc:dc:c7:21:8f:0b:b1:
                    ea:9e:6e:d0:b6:36:52:f2:7a:64:c0:51:f6:7c:53:
                    70:2d:5b:b5:d1:2d:ee:44:94:f0:f0:b5:7b:09:8e:
                    c9:d9:1c:36:6b:d3:a5:ad:41:95:14:1b:05:d9:c8:
                    ed:25:bd:46:85:00:49:99:ec:09:38:97:04:2b:d2:
                    64:39:b4:17:1c:e6:13:0a:a9:fd:d4:57:c1:3f:ec:
                    7c:ce:2d:76:d1:0c:fc:16:38:bf:df:ae:d8:28:fc:
                    ad:86:4a:c5:7f:4d:9d:c4:df:37:45:1c:8e:c1:94:
                    92:85:85:ed:37:94:0a:27:03:cb:9a:58:a1:1c:b0:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:ED:98:CD:31:BB:59:F8:44:6F:04:26:20:42:3E:FB:AD:05:FD
            X509v3 Authority Key Identifier:
                keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:56:ab:b0:80:05:aa:2d:30:9b:37:da:90:80:d8:63:37:
         18:84:7e:45:be:a9:9c:f7:36:e3:65:cf:3b:8a:35:62:35:93:
         ac:6b:be:57:16:38:ec:0e:cc:04:e7:80:23:77:95:39:a6:fa:
         7c:9f:cb:52:e5:12:3f:b6:20:96:86:83:73:fe:72:f3:28:a3:
         fe:33:95:79:a9:ed:fe:d3:d6:58:e8:14:55:ac:99:02:d3:ec:
         c3:01:88:82:ef:e2:2f:f4:93:8b:41:2a:3b:f5:44:25:b2:e1:
         fc:b9:21:13:43:4b:8c:82:24:08:9b:79:40:fe:42:f3:a3:64:
         d9:52:9c:6b:91:ab:f4:a9:75:42:99:3a:3b:cd:44:d0:e5:76:
         62:5f:11:63:dd:a7:1e:26:d7:97:a6:bf:68:78:dc:12:f4:92:
         68:f4:78:6e:f0:f0:90:60:60:9a:28:e8:77:77:c7:69:1e:7b:
         59:5d:01:cb:bc:12:51:24:82:9b:09:da:bd:b5:42:f3:de:74:
         ad:25:1c:d5:46:34:68:c6:34:e6:9d:6f:c2:24:50:3e:2f:41:
         f9:8e:32:c3:e3:59:5d:bd:c5:7d:25:ca:8f:af:11:01:18:1d:
         c6:34:9b:55:a9:01:b2:b4:5c:a8:52:8b:45:00:78:d5:33:cf:
         86:f9:c8:0f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICExUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx
ODk3OEIyRDA4OUE1RjNERUFFMEFGMDFFOTMzNUY0REQ1RDRCQzAeFw0yNTAzMDky
MTAxMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUyMTVFRDk4Q0QzMUJC
NTlGODQ0NkYwNDI2MjA0MjNFRkJBRDA1RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw9TeQHwA5oi+QxY10P0TfLnvFIpNnhHcfjYd019nR+Y5NtaUN
R05R6m4Vd/iP2kP6ml1In1RCs9qyjtfBacnzxBBVDfpMKueMamxagb7dIuihnNFx
rGjNK9vO/sf8s0XuEILrVLEM9X8f+2QJL6gvgiJ4yHS914cFtO9XatPRvNzHIY8L
seqebtC2NlLyemTAUfZ8U3AtW7XRLe5ElPDwtXsJjsnZHDZr06WtQZUUGwXZyO0l
vUaFAEmZ7Ak4lwQr0mQ5tBcc5hMKqf3UV8E/7HzOLXbRDPwWOL/frtgo/K2GSsV/
TZ3E3zdFHI7BlJKFhe03lAonA8uaWKEcsF/1AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUUhXtmM0xu1n4RG8EJiBCPvutBf0wHwYDVR0jBBgwFoAUWBiXiy0Iml896uCv
AekzX03V1LwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTFVIV0Ev
V0JpWGl5MEltbDg5NnVDdkFla3pYMDNWMUx3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9XQmlYaXkwSW1sODk2dUN2QWVrelgwM1YxTHcuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MVUhXQS9XQmlYaXkwSW1sODk2dUN2QWVr
elgwM1YxTHcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjhW
q7CABaotMJs32pCA2GM3GIR+Rb6pnPc242XPO4o1YjWTrGu+VxY47A7MBOeAI3eV
Oab6fJ/LUuUSP7YgloaDc/5y8yij/jOVeant/tPWWOgUVayZAtPswwGIgu/iL/ST
i0EqO/VEJbLh/LkhE0NLjIIkCJt5QP5C86Nk2VKca5Gr9Kl1Qpk6O81E0OV2Yl8R
Y92nHibXl6a/aHjcEvSSaPR4bvDwkGBgmijod3fHaR57WV0By7wSUSSCmwnavbVC
8950rSUc1UY0aMY05p1vwiRQPi9B+Y4yw+NZXb3FfSXKj68RARgdxjSbVakBsrRc
qFKLRQB41TPPhvnIDw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:41:31 2025 by rpki-client