$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft File: BE02DA0D44FE912955460231A0186A486B0C371B.mft (raw, json) Hash identifier: lelHIpZ0IQyGgWp3qDkTzCPYKsceRRBw+Qc8shZjSZ8= Subject key identifier: 33:03:A3:1E:06:FA:78:A7:62:76:51:F9:61:D2:CF:96:5E:67:B5:7F Authority key identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B Certificate issuer: /CN=BE02DA0D44FE912955460231A0186A486B0C371B Certificate serial: 12CEA15072478C7C58E884B9E159745618E1BFC3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 13:07:14 +0000 Manifest this update: Mon 21 Sep 2026 13:02:14 +0000 Manifest next update: Tue 22 Sep 2026 16:46:14 +0000 Files and hashes: 1: 3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa (hash: XxmaLYe5NcRDIZkPR56pycYHblTeZ2MI3C3Z8ItmScI=) 2: BE02DA0D44FE912955460231A0186A486B0C371B.crl (hash: 93y7BoB9Lfm8s/E4QfG3hbRXxRLrKVk7pzOPS9FqarE=) 3: 3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa (hash: tReP/Qjmb7yqTg2YjMn4e1CvFyn1zD9jlRie9CUHpwg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ce:a1:50:72:47:8c:7c:58:e8:84:b9:e1:59:74:56:18:e1:bf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE02DA0D44FE912955460231A0186A486B0C371B Validity Not Before: Sep 21 13:02:14 2026 GMT Not After : Sep 22 16:46:14 2026 GMT Subject: CN=3303A31E06FA78A7627651F961D2CF965E67B57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:4f:77:21:a3:12:5b:8c:c4:01:9e:7c:ef: 03:55:04:f0:16:80:6b:64:5c:0a:57:a9:5f:d2:33: b6:d8:bd:10:1e:e8:19:a8:f7:e2:99:85:5f:07:9e: c2:5e:df:6e:9b:eb:c0:bc:2b:a7:8b:f6:c1:80:16: e4:3b:0c:69:9c:09:e1:f7:3d:3f:06:2c:c3:4a:9a: 65:7e:27:92:19:36:71:1d:f0:c5:f3:22:f5:4b:17: 90:fb:85:fc:4e:50:50:44:79:74:ee:4e:55:35:68: fe:ea:2f:56:a4:17:f0:7e:dd:e9:10:44:c7:80:14: 60:0a:9c:de:15:e9:ea:64:b6:8a:29:3f:34:38:f8: 84:29:b7:38:a1:8e:fa:39:30:d5:25:10:25:6d:3c: 8f:02:0b:c0:a5:4a:df:13:f9:51:82:14:f4:c1:11: c6:9d:ff:9e:1a:a4:1a:28:16:e8:a2:24:38:6f:63: da:c8:d4:c1:7e:8e:e9:11:38:03:4f:4c:92:43:c7: 69:24:c1:56:bd:e6:b0:42:b7:ef:4a:e0:f7:88:87: d2:d1:10:84:db:72:2f:96:75:99:cf:78:65:36:cf: e2:2b:d8:0d:92:fd:d2:c8:d5:28:7d:58:66:da:ec: 68:31:70:a3:c4:b1:cd:0f:c3:99:75:67:fe:7e:5a: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:A3:1E:06:FA:78:A7:62:76:51:F9:61:D2:CF:96:5E:67:B5:7F X509v3 Authority Key Identifier: keyid:BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:e5:7f:6e:3f:ab:12:96:ba:fb:aa:13:50:f2:d5:2c:08: fc:74:17:f3:22:3a:cc:46:ed:c6:78:3e:ab:88:e4:c3:c9:b9: bf:4b:fe:07:38:5a:09:09:59:ba:89:28:af:27:2e:20:a2:d4: 67:bf:41:36:14:32:2a:be:70:54:e1:fd:77:3e:ab:31:60:c4: 04:3f:ce:d0:94:9e:d8:e7:eb:bd:3f:91:7f:2d:f7:ea:a9:78: 57:cc:40:9a:1d:70:7c:3b:a4:42:85:00:d8:fc:db:f8:3f:50: 28:3f:0b:89:8b:b6:0d:e2:52:94:cd:1d:b7:e6:d6:f7:df:4b: f2:d3:5e:e9:92:bd:d4:ae:85:0c:4b:14:19:29:ea:8b:eb:87: 63:a7:c8:ec:44:dd:fc:9e:ce:8f:e5:15:47:2d:69:a4:80:48: 97:e2:cd:32:95:32:cb:55:aa:11:e9:df:8f:10:06:2e:ab:33: 85:e9:4f:1d:29:f2:6b:49:4f:47:12:ab:97:6c:12:67:62:21: 23:30:e7:fb:53:fe:4f:d7:6a:27:f6:26:9f:a3:66:d6:19:01: 79:f4:20:76:5d:09:8c:80:3e:bb:19:fa:36:62:1c:91:ac:4e: c3:87:c5:c3:a1:91:85:c9:dd:76:81:0a:8c:5d:eb:b4:78:52: 4f:fb:1e:b9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEs6hUHJHjHxY6IS54Vl0Vhjhv8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUwMkRBMEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2 QjBDMzcxQjAeFw0yNjA5MjExMzAyMTRaFw0yNjA5MjIxNjQ2MTRaMDMxMTAvBgNV BAMTKDMzMDNBMzFFMDZGQTc4QTc2Mjc2NTFGOTYxRDJDRjk2NUU2N0I1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHE93IaMSW4zEAZ587wNVBPAW gGtkXApXqV/SM7bYvRAe6Bmo9+KZhV8HnsJe326b68C8K6eL9sGAFuQ7DGmcCeH3 PT8GLMNKmmV+J5IZNnEd8MXzIvVLF5D7hfxOUFBEeXTuTlU1aP7qL1akF/B+3ekQ RMeAFGAKnN4V6epktoopPzQ4+IQptzihjvo5MNUlECVtPI8CC8ClSt8T+VGCFPTB Ecad/54apBooFuiiJDhvY9rI1MF+jukROANPTJJDx2kkwVa95rBCt+9K4PeIh9LR EITbci+WdZnPeGU2z+Ir2A2S/dLI1Sh9WGba7GgxcKPEsc0Pw5l1Z/5+WuPdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUMwOjHgb6eKdidlH5YdLPll5ntX8wHwYDVR0j BBgwFoAUvgLaDUT+kSlVRgIxoBhqSGsMNxswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1RXLzEvQkUwMkRBMEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2QjBDMzcxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC9CRTAyREEwRDQ0RkU5MTI5NTU0NjAyMzFB MDE4NkE0ODZCMEMzNzFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1RXLzEvQkUwMkRB MEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2QjBDMzcxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADri 5X9uP6sSlrr7qhNQ8tUsCPx0F/MiOsxG7cZ4PquI5MPJub9L/gc4WgkJWbqJKK8n LiCi1Ge/QTYUMiq+cFTh/Xc+qzFgxAQ/ztCUntjn670/kX8t9+qpeFfMQJodcHw7 pEKFANj82/g/UCg/C4mLtg3iUpTNHbfm1vffS/LTXumSvdSuhQxLFBkp6ovrh2On yOxE3fyezo/lFUctaaSASJfizTKVMstVqhHp348QBi6rM4XpTx0p8mtJT0cSq5ds EmdiISMw5/tT/k/Xaif2Jp+jZtYZAXn0IHZdCYyAPrsZ+jZiHJGsTsOHxcOhkYXJ 3XaBCoxd67R4Uk/7Hrk= -----END CERTIFICATE-----Generated at Tue Sep 22 05:49:10 2026 by rpki-client