$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: 3TtgIr8JwLjmX6EN0o10JXfCpjXadZQQ7n+lOJvkBxM= Subject key identifier: F9:83:CE:0E:E5:45:08:DA:D8:39:58:29:68:F3:72:6E:18:E4:50:1C Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 250761FBE9F870A4DE598148F0EEF796E7533EBB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: CE Signing time: Sun 11 Oct 2026 23:50:10 +0000 Manifest this update: Sun 11 Oct 2026 23:45:10 +0000 Manifest next update: Tue 13 Oct 2026 01:14:10 +0000 Files and hashes: 1: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 2: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: seqH59cTe8lrHu+Ik5F3POa/US2DAnXghfUSq1pJ9AQ=) 3: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 01:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:07:61:fb:e9:f8:70:a4:de:59:81:48:f0:ee:f7:96:e7:53:3e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Oct 11 23:45:10 2026 GMT Not After : Oct 13 01:14:10 2026 GMT Subject: CN=F983CE0EE54508DAD839582968F3726E18E4501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:2a:d1:ab:5f:a8:56:bd:db:a8:6f:44:bf: 2e:3d:fd:fc:9a:d6:f2:a9:11:30:70:9c:02:3e:6c: b8:50:8c:7e:57:db:bf:4f:ec:72:18:e5:0c:82:28: 7f:f8:22:60:06:6b:54:52:7a:5e:7d:45:87:26:e5: f9:cc:e7:14:eb:0e:75:13:e7:56:0e:db:b3:98:c4: 03:a5:c2:3a:c4:49:c9:b0:51:5c:01:99:6d:b7:48: 39:d2:59:ce:79:49:42:41:5b:f9:73:41:c3:25:0b: 24:e1:a1:de:0f:8a:03:b8:84:65:9d:e0:cc:d2:4d: 1b:06:f4:aa:6a:55:b1:b4:70:e0:24:51:bb:9e:2d: 2a:d8:66:36:fe:1d:41:a8:48:77:28:12:46:01:c4: e0:64:66:c6:d5:a2:3a:1d:61:6d:73:b8:b9:66:29: 36:fb:6f:01:bc:db:b1:80:56:cc:4d:21:d0:a3:32: ba:b4:90:ed:d4:b6:26:de:cb:ad:7c:d4:72:0c:d3: ad:0a:8e:24:3a:92:e4:fa:61:54:86:5f:e5:fa:9c: 5f:49:cb:c7:af:94:c8:89:f4:cb:1c:dc:28:0b:e4: 6a:33:81:fb:5e:86:8a:a4:02:f2:d1:1e:af:b8:6e: 59:f6:1e:41:10:51:9b:f3:30:f0:0d:98:48:58:9c: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:83:CE:0E:E5:45:08:DA:D8:39:58:29:68:F3:72:6E:18:E4:50:1C X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:81:8f:57:ed:2d:9b:42:69:5f:ec:70:a7:e6:c3:e1:b8:2e: e5:e4:70:fa:1c:41:b4:65:d4:5c:3d:ce:96:8d:7a:2d:fb:e7: 63:1a:17:f7:cb:93:57:28:0c:e2:81:36:c4:c2:5d:2e:c9:23: 80:ca:3a:bf:2d:75:14:82:42:3a:b4:89:1f:e6:bd:25:a0:05: d3:d9:3f:67:9e:56:94:ff:68:2d:67:3f:72:8e:aa:d0:d7:aa: 79:9a:24:1a:42:6a:e4:86:e1:4f:d1:a4:0c:5b:67:6a:5c:2b: fb:1f:05:52:c4:fa:db:e9:53:8b:82:fb:60:63:aa:d9:75:59: b7:d3:86:1b:1b:30:bb:f4:34:7f:b9:3e:79:15:33:0d:ea:46: 48:14:66:c6:df:3a:e6:5b:84:bc:62:26:06:3f:31:31:75:a2: 35:16:76:13:9b:bf:7b:7a:14:95:5d:8c:dd:55:97:d7:fd:a4: 9e:2c:73:71:79:9d:e3:ce:a3:f2:6d:76:a8:46:50:23:95:38: ef:97:16:43:75:a2:8a:05:ff:c3:b6:e7:e4:70:93:ed:bc:52: 91:fc:f5:1e:5d:f9:3a:91:02:c6:ee:df:96:d8:77:79:ed:e3: 24:4d:b6:18:b2:12:c4:6e:42:fb:19:6a:78:98:08:34:1e:a4: f0:dc:83:97 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJQdh++n4cKTeWYFI8O73ludTPrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjEwMTEyMzQ1MTBaFw0yNjEwMTMwMTE0MTBaMDMxMTAvBgNV BAMTKEY5ODNDRTBFRTU0NTA4REFEODM5NTgyOTY4RjM3MjZFMThFNDUwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLSrRq1+oVr3bqG9Evy49/fya 1vKpETBwnAI+bLhQjH5X279P7HIY5QyCKH/4ImAGa1RSel59RYcm5fnM5xTrDnUT 51YO27OYxAOlwjrEScmwUVwBmW23SDnSWc55SUJBW/lzQcMlCyThod4PigO4hGWd 4MzSTRsG9KpqVbG0cOAkUbueLSrYZjb+HUGoSHcoEkYBxOBkZsbVojodYW1zuLlm KTb7bwG827GAVsxNIdCjMrq0kO3Utibey6181HIM060KjiQ6kuT6YVSGX+X6nF9J y8evlMiJ9Msc3CgL5GozgftehoqkAvLRHq+4bln2HkEQUZvzMPANmEhYnJ2RAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+YPODuVFCNrYOVgpaPNybhjkUBwwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABaB j1ftLZtCaV/scKfmw+G4LuXkcPocQbRl1Fw9zpaNei3752MaF/fLk1coDOKBNsTC XS7JI4DKOr8tdRSCQjq0iR/mvSWgBdPZP2eeVpT/aC1nP3KOqtDXqnmaJBpCauSG 4U/RpAxbZ2pcK/sfBVLE+tvpU4uC+2Bjqtl1WbfThhsbMLv0NH+5PnkVMw3qRkgU ZsbfOuZbhLxiJgY/MTF1ojUWdhObv3t6FJVdjN1Vl9f9pJ4sc3F5nePOo/JtdqhG UCOVOO+XFkN1oooF/8O25+Rwk+28UpH89R5d+TqRAsbu35bYd3nt4yRNthiyEsRu QvsZaniYCDQepPDcg5c= -----END CERTIFICATE-----Generated at Mon Oct 12 15:03:24 2026 by rpki-client