Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
File:                     8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json)
Hash identifier:          qpY3hB7YOaMhhj/+992pRHb87jgc82uKs/yIaTnwfJs=
Subject key identifier:   58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66
Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1
Certificate issuer:       /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1
Certificate serial:       23
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
Manifest number:          22
Signing time:             Sat 23 Aug 2025 21:12:39 +0000
Manifest this update:     Sat 23 Aug 2025 21:12:39 +0000
Manifest next update:     Sun 24 Aug 2025 03:12:39 +0000
Files and hashes:         1: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: G3yhnmsTItDUmL6IBFkLl6zBWd2HahlHCVuuUpAT9Bw=)
                          2: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1
        Validity
            Not Before: Aug 23 21:12:39 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a:
                    99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9:
                    fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8:
                    54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5:
                    d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4:
                    a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3:
                    f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03:
                    3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d:
                    f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc:
                    0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e:
                    51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50:
                    25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78:
                    4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85:
                    b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8:
                    b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21:
                    91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2:
                    bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66
            X509v3 Authority Key Identifier:
                keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:ff:38:8e:36:f3:8a:08:1b:15:d1:f1:a4:76:10:cc:6c:
         26:6b:57:25:55:f8:36:20:69:1c:17:97:bc:eb:be:4e:d8:f6:
         af:ad:7c:9d:d9:b7:a1:39:fc:b1:b2:2d:ad:86:98:15:17:7b:
         d7:3f:1f:8c:e3:3f:f8:05:b8:aa:b6:90:e8:d0:38:2e:06:a2:
         6c:2b:3e:e8:a6:6e:22:44:5a:1d:f4:f0:cf:a1:c2:65:62:a9:
         bc:62:a4:2f:22:3e:84:d4:b4:78:82:99:90:a3:80:d3:bd:2a:
         81:9f:de:7e:4a:75:3b:79:e0:39:f8:cd:18:9b:18:4a:fe:4f:
         58:61:0d:6a:09:d3:23:d2:e9:cc:c4:d1:cc:64:e2:e0:92:1b:
         47:15:78:61:4f:d4:57:e4:0b:13:77:c5:35:26:3e:cd:31:64:
         a4:74:c2:25:1a:9a:6d:50:a5:37:9b:e8:6d:a7:1c:37:0e:2c:
         82:09:8b:d1:62:0a:e6:8b:fc:c7:73:06:9d:02:66:bb:f8:2c:
         ab:1e:e0:b9:c2:02:88:02:e8:48:53:80:38:89:9e:43:3b:03:
         31:3c:90:3b:03:17:f1:78:d5:a9:10:74:07:bc:67:8e:e8:93:
         fa:ac:f8:05:88:b4:26:24:ae:b9:d4:c0:22:bb:a4:e3:50:b4:
         b8:64:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:37 2025 by rpki-client