Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
File:                     TmCbp0GG0LDjoanAENod8FWaGYI.mft (raw, json)
Hash identifier:          pMJmZ9XCNdDI+u0aEdz/Vjm1FbPZXelbYgF+9dqOXTs=
Subject key identifier:   E8:7C:72:D2:8B:B3:6C:44:5A:AA:EA:2C:5B:1C:6E:A7:44:40:D0:2C
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Certificate issuer:       /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial:       0B20
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
Manifest number:          0B0C
Signing time:             Sun 15 Oct 2023 07:23:35 +0000
Manifest this update:     Sun 15 Oct 2023 07:23:35 +0000
Manifest next update:     Tue 17 Oct 2023 07:23:35 +0000
Files and hashes:         1: TmCbp0GG0LDjoanAENod8FWaGYI.crl (hash: 5j/qENm94WGd/b7Z7i9KTcYsGEHVbGZwHBZpOb/Tja8=)
                          2: eQbyjynx9lJXl37UHyvIERZoFZk.roa (hash: KoNauRNEwKhomEFAAF3CaQOcUqlIo7nFXyKhHQNG+wY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2848 (0xb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
        Validity
            Not Before: Oct 15 07:23:35 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E87C72D28BB36C445AAAEA2C5B1C6EA74440D02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:5b:a2:11:5b:68:7f:df:f2:83:51:33:22:
                    58:9e:29:c1:f1:d0:e9:ab:14:49:c0:64:f1:53:ea:
                    9f:14:2f:dc:9f:12:5a:ce:22:67:bf:d9:2c:ef:86:
                    98:da:b9:d6:4b:69:36:b4:f1:ab:5c:79:f3:e5:95:
                    e1:98:cc:f9:57:29:01:87:d6:ab:79:70:81:c9:7d:
                    3b:1e:ea:29:b1:c6:cd:82:b5:7d:f4:6a:3f:11:4e:
                    dd:7b:02:35:6c:c6:1c:ce:14:b0:1d:42:14:2b:7d:
                    94:60:ab:f2:18:37:18:7a:5e:22:6e:2f:7f:e4:b3:
                    8d:34:e8:84:19:5c:97:9e:23:a8:ed:78:92:e7:13:
                    e5:e1:71:d6:00:12:1f:86:5c:1b:4a:b5:78:49:29:
                    ce:3b:81:eb:8d:16:2c:eb:a2:db:f1:7e:68:66:8d:
                    7f:d9:82:bb:f1:a6:0c:3f:b0:0b:c8:87:3a:94:86:
                    d6:41:d3:f6:a2:c4:6e:00:ee:b6:f0:da:59:69:b7:
                    00:a8:03:b9:9e:4b:0a:95:de:85:de:cc:a6:57:75:
                    b2:2f:c7:f7:c5:b4:c2:97:67:b6:ff:8c:ef:34:f2:
                    85:33:a9:66:2e:d7:89:c8:af:1b:89:3e:13:ec:46:
                    76:3f:a2:7b:16:48:b0:4f:08:e9:cc:1a:02:63:6d:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:72:D2:8B:B3:6C:44:5A:AA:EA:2C:5B:1C:6E:A7:44:40:D0:2C
            X509v3 Authority Key Identifier:
                keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:1b:35:d4:ca:51:bb:2c:3c:10:53:6a:98:8c:79:98:af:
         c4:d9:70:dc:f5:ba:c2:6e:91:43:2d:6f:95:0b:f9:70:a3:ff:
         95:06:ab:7f:1b:52:f9:34:8b:72:94:2e:2c:86:d1:8d:11:5c:
         e2:d1:0e:35:16:22:a5:a9:53:ae:36:6f:b6:73:5a:d5:5e:dd:
         00:7c:07:d5:f4:24:13:b4:09:3f:38:a9:db:4c:83:a4:c6:4b:
         30:e2:64:33:c3:61:89:61:0e:d7:4b:32:25:ff:b2:13:3f:b8:
         4f:e4:c1:6d:43:78:62:a0:d5:f1:c3:dd:22:dd:2e:31:49:da:
         1a:06:90:b0:9e:51:94:2a:ac:f7:62:94:dd:f0:e7:f4:aa:9b:
         1b:e3:5a:7a:f7:dc:1b:b5:21:2c:6b:ec:43:e4:f8:36:54:5a:
         0c:16:e8:df:46:44:84:20:d1:7f:c5:97:94:97:55:2c:88:a9:
         67:3b:df:e7:27:68:f4:b5:51:1a:19:4c:4d:b7:a4:49:71:8a:
         d6:75:62:12:b1:12:43:1a:0d:06:81:0c:07:7a:b5:5d:9f:e1:
         9a:23:fe:83:47:5b:a8:fe:89:ed:04:77:dc:29:fa:56:b0:a1:
         80:96:86:f6:b7:7e:a0:b2:0d:21:c1:26:c8:6a:74:4b:d3:2f:
         c5:95:34:83
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU2
MDlCQTc0MTg2RDBCMEUzQTFBOUMwMTBEQTFERjA1NTlBMTk4MjAeFw0yMzEwMTUw
NzIzMzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU4N0M3MkQyOEJCMzZD
NDQ1QUFBRUEyQzVCMUM2RUE3NDQ0MEQwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgjFuiEVtof9/yg1EzIlieKcHx0OmrFEnAZPFT6p8UL9yfElrO
Ime/2SzvhpjaudZLaTa08atcefPlleGYzPlXKQGH1qt5cIHJfTse6imxxs2CtX30
aj8RTt17AjVsxhzOFLAdQhQrfZRgq/IYNxh6XiJuL3/ks4006IQZXJeeI6jteJLn
E+XhcdYAEh+GXBtKtXhJKc47geuNFizrotvxfmhmjX/Zgrvxpgw/sAvIhzqUhtZB
0/aixG4A7rbw2llptwCoA7meSwqV3oXezKZXdbIvx/fFtMKXZ7b/jO808oUzqWYu
14nIrxuJPhPsRnY/onsWSLBPCOnMGgJjbX65AgMBAAGjggINMIICCTAdBgNVHQ4E
FgQU6Hxy0ouzbERaquosWxxup0RA0CwwHwYDVR0jBBgwFoAUTmCbp0GG0LDjoanA
ENod8FWaGYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENP
TVRXL1RtQ2JwMEdHMExEam9hbkFFTm9kOEZXYUdZSS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVG1DYnAwR0cwTERqb2FuQUVOb2Q4RldhR1lJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENPTVRXL1RtQ2JwMEdHMExE
am9hbkFFTm9kOEZXYUdZSS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQB1Sxs11MpRuyw8EFNqmIx5mK/E2XDc9brCbpFDLW+VC/lwo/+VBqt/G1L5
NItylC4shtGNEVzi0Q41FiKlqVOuNm+2c1rVXt0AfAfV9CQTtAk/OKnbTIOkxksw
4mQzw2GJYQ7XSzIl/7ITP7hP5MFtQ3hioNXxw90i3S4xSdoaBpCwnlGUKqz3YpTd
8Of0qpsb41p699wbtSEsa+xD5Pg2VFoMFujfRkSEINF/xZeUl1UsiKlnO9/nJ2j0
tVEaGUxNt6RJcYrWdWISsRJDGg0GgQwHerVdn+GaI/6DR1uo/ontBHfcKfpWsKGA
lob2t36gsg0hwSbIanRL0y/FlTSD
-----END CERTIFICATE-----