$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: yJ3QtbdkYtVVwNRoEZf3IDu9uOjz9IBWlSOCPbIncDk= Subject key identifier: B9:47:97:78:6F:FB:D6:05:E9:0F:B9:21:D6:2D:9E:24:11:BB:66:D3 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 7F681AF784377C49D161DCF590C7F3360A526E64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: 6A Signing time: Wed 29 Jul 2026 03:15:38 +0000 Manifest this update: Wed 29 Jul 2026 03:10:38 +0000 Manifest next update: Thu 30 Jul 2026 05:10:38 +0000 Files and hashes: 1: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: sgy7R+XkUy4wxEwlJtYH9cXtUJY2SD6Dm2GMOqDy3y4=) 2: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 3: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:1a:f7:84:37:7c:49:d1:61:dc:f5:90:c7:f3:36:0a:52:6e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Jul 29 03:10:38 2026 GMT Not After : Jul 30 05:10:38 2026 GMT Subject: CN=B94797786FFBD605E90FB921D62D9E2411BB66D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:2c:a5:9a:18:27:6d:d8:ba:1b:38:a8:51: 03:54:76:39:36:8f:2e:69:c7:cf:fc:ae:17:60:b2: b2:83:6b:34:92:f4:51:92:5a:f2:e2:63:1b:38:35: 07:76:0b:5e:71:bd:29:8b:3b:3e:bf:91:54:8e:34: 17:70:3a:d6:56:ae:7a:77:2b:8d:86:27:45:97:91: a0:aa:0c:87:b4:4f:66:9e:0f:eb:de:10:8f:50:2a: 83:95:72:3c:e8:85:9b:31:ad:93:2d:c3:86:d2:eb: 85:e2:5b:b5:31:f0:51:d2:43:8e:ba:9a:31:e7:fc: 7d:f5:a9:2e:8c:62:8b:d7:ba:75:de:bf:91:2d:88: 88:98:d3:a3:c8:40:9c:b1:36:5d:34:da:4d:9e:43: 94:cf:7c:28:c5:05:c1:be:4c:16:5b:80:62:16:d7: 03:cd:95:a2:f5:20:18:94:3e:97:e6:2c:40:69:88: 6e:85:6f:c4:36:f6:d9:8c:df:e4:3f:d6:c8:4a:5f: bf:f5:44:28:81:89:04:24:14:88:45:c2:3e:e0:05: b3:ae:f2:24:2f:37:6d:d6:8c:ee:96:05:2d:10:ce: d7:68:43:08:5f:90:d2:a5:ad:c1:55:4e:d7:b3:c2: 36:7e:f0:75:60:0e:01:40:3a:73:35:0f:76:56:11: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:97:78:6F:FB:D6:05:E9:0F:B9:21:D6:2D:9E:24:11:BB:66:D3 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9e:56:11:eb:a3:b0:29:25:1f:5b:14:94:c8:8e:01:4e:b3: b5:04:69:c6:35:c8:f4:f0:45:08:b8:75:8e:c2:a0:5f:db:6c: 68:4c:37:9b:0b:eb:4a:c5:ca:f9:de:bc:a5:63:bf:ac:96:05: 99:1b:18:26:09:e1:cb:13:48:8f:26:2a:73:71:c5:88:61:1b: 3c:9a:75:e2:bf:52:a5:d1:b3:84:21:57:08:15:86:77:b8:a1: d0:f0:00:7d:35:57:a3:03:39:f9:ab:2e:93:8b:7d:bc:60:86: 9c:3c:5e:4c:01:55:69:92:e1:d1:59:70:3e:fd:e4:4b:2e:9c: 3d:0d:1a:e5:f4:33:5b:dc:bf:0b:02:ae:a0:2b:86:bc:06:36: 8a:ed:7b:c1:81:b4:a1:6e:a8:7b:b5:e7:b9:1b:0a:c4:74:b5: 5c:10:c2:7c:bf:f7:b0:de:b4:75:2d:55:5e:70:f4:73:34:4c: 87:44:9d:76:28:74:c7:08:b6:25:e2:57:4f:77:c0:b8:06:69: b2:86:63:22:09:6a:ff:eb:c7:41:28:3b:d9:6b:9c:58:ed:be: 31:b3:8f:64:bf:af:00:a9:3c:6e:d4:26:03:12:4a:0a:9d:6c: bd:63:50:a0:4e:10:51:68:22:fe:1a:bb:59:b8:91:b4:00:00: 01:d1:19:01 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUf2ga94Q3fEnRYdz1kMfzNgpSbmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA3MjkwMzEwMzhaFw0yNjA3MzAwNTEwMzhaMDMxMTAvBgNV BAMTKEI5NDc5Nzc4NkZGQkQ2MDVFOTBGQjkyMUQ2MkQ5RTI0MTFCQjY2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvCylmhgnbdi6GzioUQNUdjk2 jy5px8/8rhdgsrKDazSS9FGSWvLiYxs4NQd2C15xvSmLOz6/kVSONBdwOtZWrnp3 K42GJ0WXkaCqDIe0T2aeD+veEI9QKoOVcjzohZsxrZMtw4bS64XiW7Ux8FHSQ466 mjHn/H31qS6MYovXunXev5EtiIiY06PIQJyxNl002k2eQ5TPfCjFBcG+TBZbgGIW 1wPNlaL1IBiUPpfmLEBpiG6Fb8Q29tmM3+Q/1shKX7/1RCiBiQQkFIhFwj7gBbOu 8iQvN23WjO6WBS0QztdoQwhfkNKlrcFVTtezwjZ+8HVgDgFAOnM1D3ZWEV6pAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUuUeXeG/71gXpD7kh1i2eJBG7ZtMwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKWe VhHro7ApJR9bFJTIjgFOs7UEacY1yPTwRQi4dY7CoF/bbGhMN5sL60rFyvnevKVj v6yWBZkbGCYJ4csTSI8mKnNxxYhhGzyadeK/UqXRs4QhVwgVhne4odDwAH01V6MD OfmrLpOLfbxghpw8XkwBVWmS4dFZcD795EsunD0NGuX0M1vcvwsCrqArhrwGNort e8GBtKFuqHu157kbCsR0tVwQwny/97DetHUtVV5w9HM0TIdEnXYodMcItiXiV093 wLgGabKGYyIJav/rx0EoO9lrnFjtvjGzj2S/rwCpPG7UJgMSSgqdbL1jUKBOEFFo Iv4au1m4kbQAAAHRGQE= -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:03 2026 by rpki-client