Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.mft
File:                     322pw6cVLrHobRfMId4CDY_JbvM.mft (raw, json)
Hash identifier:          OJPb2tgaVDEh0qS7bw3xbEE6Q/QzYY032VGS6R3PDPw=
Subject key identifier:   2D:1E:B7:8B:28:79:89:FA:A9:5C:B3:F0:34:78:46:64:5E:DA:83:32
Authority key identifier: DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
Certificate issuer:       /CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
Certificate serial:       0878
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.mft
Manifest number:          0874
Signing time:             Thu 03 Dec 2020 16:37:06 +0000
Manifest this update:     Thu 03 Dec 2020 16:37:06 +0000
Manifest next update:     Sat 05 Dec 2020 16:37:06 +0000
Files and hashes:         1: 322pw6cVLrHobRfMId4CDY_JbvM.crl (hash: VZ3dxrQdnAS5/tWFNjAKm3pbthK0xxKTbULLkX3l/hU=)
                          2: 794S818Jwb6nkfLsOmW4BbkSgj8.roa (hash: YiryQVSusQHiUldFeCrp4l07Q7M8ojHBPa1pa+dqTu0=)
                          3: w-o2sQOUGVPMz1wflFgiXQ05898.roa (hash: kw/bl8S98f0L5AllH5xZdsaYu9ijbINgpvY12uC7zNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
        Validity
            Not Before: Dec  3 16:37:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2D1EB78B287989FAA95CB3F0347846645EDA8332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:f0:b9:69:a4:c0:11:cf:65:25:1c:f2:01:
                    53:28:02:8a:fe:b8:4b:fc:8e:0b:0b:4a:3a:be:d3:
                    93:4c:4b:e4:43:6d:b5:ce:ed:7a:ae:93:47:7b:ba:
                    87:76:28:7e:98:f0:6d:38:02:a9:cf:70:70:d8:e6:
                    3d:33:19:42:a3:19:27:c8:d8:08:4b:cc:20:af:26:
                    fb:a6:c9:3b:7b:82:b4:76:69:6f:42:e3:63:e1:20:
                    66:fa:bd:c4:22:92:5e:19:14:e8:42:c0:29:5e:47:
                    43:00:09:18:eb:69:c0:9b:de:0a:74:aa:76:56:28:
                    6d:37:1e:b2:85:d8:f2:4d:e7:23:8d:cc:41:16:68:
                    6e:f2:e8:a0:d8:ef:82:4c:8e:54:2d:60:31:98:bb:
                    ff:1f:fb:b9:2e:af:d6:7d:cf:c9:ad:18:c3:20:c2:
                    a9:9b:7a:bf:86:4d:2a:48:ed:a2:db:ce:ef:8f:ed:
                    43:b6:12:94:38:2c:09:e3:3b:d4:9f:a8:eb:d6:36:
                    2c:d0:1f:84:fb:0e:69:72:fd:f6:a2:6d:90:0b:79:
                    92:b8:92:a1:a2:a0:71:bf:9e:ac:ca:43:20:90:3b:
                    c5:f0:af:38:b0:9b:c7:0b:1b:41:b1:ef:21:57:9b:
                    29:f6:93:79:eb:2b:7a:32:71:0a:75:c4:cc:dd:43:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:B7:8B:28:79:89:FA:A9:5C:B3:F0:34:78:46:64:5E:DA:83:32
            X509v3 Authority Key Identifier:
                keyid:DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:65:98:93:4f:fb:3f:43:3d:9b:2a:8f:c4:91:17:98:87:59:
         ed:83:80:a4:59:c7:57:ea:4b:a7:30:d2:77:fb:96:02:e3:0c:
         a8:25:5a:55:f4:10:92:b1:09:5f:af:9f:5c:c7:5b:15:86:9c:
         36:df:f5:9e:e0:61:5b:82:81:4b:85:00:7b:db:ac:5a:8e:75:
         73:21:3e:38:28:da:d1:92:0b:c9:65:bc:99:e5:d3:7d:91:2b:
         76:19:32:d5:e8:3c:61:ac:42:e2:1c:ef:92:cb:c5:0e:d8:cb:
         c6:22:11:e1:7c:7e:ae:ea:ec:f1:ea:1e:30:68:d9:96:1b:3f:
         5a:02:de:e3:42:3f:14:11:3f:d4:c7:e2:09:a9:0a:c4:f4:3c:
         36:2a:2a:3f:97:f5:e3:6d:82:d6:c7:6e:9d:65:3b:75:87:88:
         8b:f1:de:d1:ee:6b:43:a1:da:63:70:60:02:ed:19:c7:ab:7d:
         f7:e9:bb:32:3c:ca:40:44:57:c0:4f:10:76:62:27:b4:45:0a:
         3e:61:9c:4c:bb:36:3d:b7:ad:f0:9c:07:71:18:76:e0:c7:e6:
         c0:52:3d:72:7b:12:e7:b7:29:13:f2:52:5c:e2:8e:57:96:97:
         64:77:db:3b:c5:f2:e8:ba:25:66:92:08:38:ea:9b:f4:cb:b1:
         47:39:0b:c9
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY2
REE5QzNBNzE1MkVCMUU4NkQxN0NDMjFERTAyMEQ4RkM5NkVGMzAeFw0yMDEyMDMx
NjM3MDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJEMUVCNzhCMjg3OTg5
RkFBOTVDQjNGMDM0Nzg0NjY0NUVEQTgzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWqvC5aaTAEc9lJRzyAVMoAor+uEv8jgsLSjq+05NMS+RDbbXO
7Xquk0d7uod2KH6Y8G04AqnPcHDY5j0zGUKjGSfI2AhLzCCvJvumyTt7grR2aW9C
42PhIGb6vcQikl4ZFOhCwCleR0MACRjracCb3gp0qnZWKG03HrKF2PJN5yONzEEW
aG7y6KDY74JMjlQtYDGYu/8f+7kur9Z9z8mtGMMgwqmber+GTSpI7aLbzu+P7UO2
EpQ4LAnjO9SfqOvWNizQH4T7Dmly/faibZALeZK4kqGioHG/nqzKQyCQO8Xwrziw
m8cLG0Gx7yFXmyn2k3nrK3oycQp1xMzdQ54zAgMBAAGjggIBMIIB/TAdBgNVHQ4E
FgQULR63iyh5ifqpXLPwNHhGZF7agzIwHwYDVR0jBBgwFoAU322pw6cVLrHobRfM
Id4CDY/JbvMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1hULzMy
MnB3NmNWTHJIb2JSZk1JZDRDRFlfSmJ2TS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
MzIycHc2Y1ZMckhvYlJmTUlkNENEWV9KYnZNLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvQ1hULzMyMnB3NmNWTHJIb2JSZk1JZDRDRFlf
SmJ2TS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCZZiTT/s/
Qz2bKo/EkReYh1ntg4CkWcdX6kunMNJ3+5YC4wyoJVpV9BCSsQlfr59cx1sVhpw2
3/We4GFbgoFLhQB726xajnVzIT44KNrRkgvJZbyZ5dN9kSt2GTLV6DxhrELiHO+S
y8UO2MvGIhHhfH6u6uzx6h4waNmWGz9aAt7jQj8UET/Ux+IJqQrE9Dw2Kio/l/Xj
bYLWx26dZTt1h4iL8d7R7mtDodpjcGAC7RnHq3336bsyPMpARFfATxB2Yie0RQo+
YZxMuzY9t63wnAdxGHbgx+bAUj1yexLntykT8lJc4o5Xlpdkd9s7xfLouiVmkgg4
6pv0y7FHOQvJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org