$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: 9XAK08U/bYvuIYiazrMFAPdC0cu4z3AJQzX6WYS89Ts= Subject key identifier: C7:5E:78:A9:89:6C:05:98:20:EA:E8:13:2B:CD:B5:2A:CA:59:8A:73 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 056737267CDF2CE3224143E96B7AC0999E151536 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 01:03:35 +0000 Manifest this update: Sat 13 Jun 2026 00:58:35 +0000 Manifest next update: Sun 14 Jun 2026 04:30:35 +0000 Files and hashes: 1: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: jYYD7hCPFv1E3AXQrwfwCzCJjBUP61Si9T+xoSu/nFI=) 2: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) 3: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:67:37:26:7c:df:2c:e3:22:41:43:e9:6b:7a:c0:99:9e:15:15:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Jun 13 00:58:35 2026 GMT Not After : Jun 14 04:30:35 2026 GMT Subject: CN=C75E78A9896C059820EAE8132BCDB52ACA598A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:68:7b:c5:0f:99:3b:f7:dd:17:42:56:51: 81:a0:a6:ef:22:9b:86:d3:0c:79:b2:fd:d2:af:2c: 0f:01:24:b3:e5:9e:fa:05:6c:8f:74:2b:47:b1:74: 20:2e:56:d4:b7:49:5e:5d:0a:12:07:81:8a:f1:05: 01:8a:8a:a6:c5:b4:54:f1:cf:eb:04:d0:0e:db:e0: d1:53:4d:cb:7e:57:8c:75:1d:1a:43:07:60:78:1a: a6:b7:cf:63:f8:dd:38:67:90:7c:ed:7d:44:7a:77: ac:10:26:59:c1:e3:25:c1:ed:46:09:dc:5d:2b:c4: b9:36:bc:b9:97:d6:c8:c7:8a:ef:d7:78:fc:1a:4d: d3:d8:40:b9:73:86:55:ed:a8:04:64:69:b0:89:65: 9a:ad:cb:7a:bc:ee:3c:9f:20:94:94:4d:f0:9d:f4: 47:52:cf:43:d4:f8:41:20:ee:17:14:84:2b:52:e7: 5d:c1:58:a9:a4:27:14:a2:dd:42:fa:1c:59:db:9b: 4e:88:59:d8:6d:f4:f2:73:17:58:9c:2c:b1:36:e6: 9c:d9:2a:25:4d:d0:98:a8:1e:c0:fc:6c:b9:19:c1: c3:33:60:ee:09:c0:85:84:1f:72:6d:da:e3:3b:00: 4a:14:a7:aa:9a:4f:7f:83:40:14:4f:70:f7:3b:54: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:78:A9:89:6C:05:98:20:EA:E8:13:2B:CD:B5:2A:CA:59:8A:73 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1f:d3:19:b8:33:db:7d:2c:fc:ba:98:f3:b4:87:e1:f6:f7: 3d:9c:d0:30:91:ab:8f:8d:b7:6e:3f:73:a5:33:6a:50:7a:58: 1e:25:c8:a1:ec:e2:45:5a:f9:4c:b2:14:72:4d:7c:4d:50:77: f2:ac:52:ca:2a:f2:b9:09:c2:83:45:92:89:df:1f:0b:f8:df: 42:93:97:76:8a:69:61:d6:0c:54:d3:cd:60:0a:97:cb:e4:78: 77:6b:ec:81:60:84:73:bb:6c:d5:18:f4:2d:ee:9f:90:f3:22: 1e:18:63:fa:c5:f8:1b:5e:c6:82:43:d8:0c:84:0a:ed:f6:82: 42:2b:da:9f:90:30:db:72:2d:2a:72:1b:d6:0a:01:85:b9:e6: 3f:a8:f7:a5:fa:7f:91:f9:3d:da:bd:0f:51:4a:3e:49:89:e7: 7d:86:4f:fb:c3:02:ba:b1:d2:64:4c:5f:0a:ce:b8:40:35:ed: 81:5d:27:8e:0c:fd:fc:45:71:c3:ec:83:32:2e:b3:c4:4a:db: 14:73:24:13:f7:70:22:9e:ae:3a:92:61:91:46:05:92:c3:ab: 6f:2a:65:a4:bf:ab:89:81:31:ea:4a:a5:14:48:a9:1c:13:da: a6:b2:30:92:05:16:20:45:e4:72:6c:18:25:5b:8c:37:45:7b: 44:e6:c1:b0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBWc3JnzfLOMiQUPpa3rAmZ4VFTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA2MTMwMDU4MzVaFw0yNjA2MTQwNDMwMzVaMDMxMTAvBgNV BAMTKEM3NUU3OEE5ODk2QzA1OTgyMEVBRTgxMzJCQ0RCNTJBQ0E1OThBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Umh7xQ+ZO/fdF0JWUYGgpu8i m4bTDHmy/dKvLA8BJLPlnvoFbI90K0exdCAuVtS3SV5dChIHgYrxBQGKiqbFtFTx z+sE0A7b4NFTTct+V4x1HRpDB2B4Gqa3z2P43ThnkHztfUR6d6wQJlnB4yXB7UYJ 3F0rxLk2vLmX1sjHiu/XePwaTdPYQLlzhlXtqARkabCJZZqty3q87jyfIJSUTfCd 9EdSz0PU+EEg7hcUhCtS513BWKmkJxSi3UL6HFnbm06IWdht9PJzF1icLLE25pzZ KiVN0JioHsD8bLkZwcMzYO4JwIWEH3Jt2uM7AEoUp6qaT3+DQBRPcPc7VCCfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUx154qYlsBZgg6ugTK821KspZinMwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIIf 0xm4M9t9LPy6mPO0h+H29z2c0DCRq4+Nt24/c6UzalB6WB4lyKHs4kVa+UyyFHJN fE1Qd/KsUsoq8rkJwoNFkonfHwv430KTl3aKaWHWDFTTzWAKl8vkeHdr7IFghHO7 bNUY9C3un5DzIh4YY/rF+BtexoJD2AyECu32gkIr2p+QMNtyLSpyG9YKAYW55j+o 96X6f5H5Pdq9D1FKPkmJ532GT/vDArqx0mRMXwrOuEA17YFdJ44M/fxFccPsgzIu s8RK2xRzJBP3cCKerjqSYZFGBZLDq28qZaS/q4mBMepKpRRIqRwT2qayMJIFFiBF 5HJsGCVbjDdFe0TmwbA= -----END CERTIFICATE-----Generated at Sat Jun 13 20:17:48 2026 by rpki-client