$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft File: BE02DA0D44FE912955460231A0186A486B0C371B.mft (raw, json) Hash identifier: vBMBFOIXK5I/ZKp72kM4UzUlXHRsWzOvnYdxiVsUUmQ= Subject key identifier: FD:BB:11:6D:E9:DC:7A:82:F3:D0:D4:77:7F:85:6A:1F:16:48:50:35 Authority key identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B Certificate issuer: /CN=BE02DA0D44FE912955460231A0186A486B0C371B Certificate serial: 4C9E47EF2FD6C96C27C720E416D8451634B57467 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft Manifest number: FD Signing time: Sun 15 Nov 2026 02:14:11 +0000 Manifest this update: Sun 15 Nov 2026 02:09:11 +0000 Manifest next update: Mon 16 Nov 2026 03:08:11 +0000 Files and hashes: 1: 3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa (hash: tReP/Qjmb7yqTg2YjMn4e1CvFyn1zD9jlRie9CUHpwg=) 2: 3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa (hash: XxmaLYe5NcRDIZkPR56pycYHblTeZ2MI3C3Z8ItmScI=) 3: BE02DA0D44FE912955460231A0186A486B0C371B.crl (hash: 6QxpfSxLVuqN8Zo8Y6iVaz9QckNypy1na4z6SFWtxFc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9e:47:ef:2f:d6:c9:6c:27:c7:20:e4:16:d8:45:16:34:b5:74:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE02DA0D44FE912955460231A0186A486B0C371B Validity Not Before: Nov 15 02:09:11 2026 GMT Not After : Nov 16 03:08:11 2026 GMT Subject: CN=FDBB116DE9DC7A82F3D0D4777F856A1F16485035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:12:43:8f:ff:94:57:e3:ac:5e:ba:8b:9f: 21:e2:6c:b9:6b:ab:23:f2:01:3c:03:f8:3d:28:97: 6c:9a:83:80:26:86:d4:a2:23:f3:5e:50:11:1d:10: 8f:bb:7e:74:b6:4f:d0:fb:0d:de:b9:95:62:10:f0: be:76:57:29:ec:e1:d0:3c:35:c1:3d:b1:17:33:14: 9e:98:6b:f2:d4:f5:b4:fd:a2:e8:69:c4:5b:5e:a2: 69:ee:2f:79:7a:c6:23:4c:db:27:ce:ca:9d:e1:06: cc:46:89:e5:db:6a:b4:05:29:36:1a:ab:a7:ba:8d: 6d:56:5a:f6:f0:fd:14:7f:5e:19:c4:45:77:71:33: 6d:80:3b:bc:29:7a:14:68:f2:eb:3f:b2:77:68:97: f0:8e:ac:1a:70:c3:a9:c1:b6:6d:c3:f9:a1:09:76: c4:28:c7:aa:8d:b1:1c:bc:92:81:f2:d5:0e:39:a4: 9a:9d:05:38:20:c4:4d:29:85:6b:39:19:77:7c:26: 62:c5:df:85:65:fc:e2:ea:5c:25:09:b9:d9:1f:91: a5:8e:32:c5:fc:bd:8d:a3:f5:84:20:9f:3e:d3:3e: b3:0b:13:26:d4:0b:60:30:8d:81:7b:89:ec:e8:6a: 4a:17:c0:20:0a:a4:c2:b2:fa:c8:56:9e:b4:61:f5: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:11:6D:E9:DC:7A:82:F3:D0:D4:77:7F:85:6A:1F:16:48:50:35 X509v3 Authority Key Identifier: keyid:BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:23:40:55:f5:1e:8b:61:df:c7:00:c6:b8:11:7c:ae:30:51: 76:7a:70:df:b2:ca:56:3b:da:dc:b7:d6:b6:88:65:c2:57:16: e1:a1:bb:7b:9e:9c:0c:c3:03:61:36:f8:ea:95:d0:a8:4d:7b: 78:03:63:cd:7b:a5:f3:f4:0d:ab:3c:fa:d3:51:4f:b3:45:a6: a7:ab:aa:0a:83:c2:4e:f5:51:e9:12:aa:cb:07:d5:a2:28:e4: 58:08:62:d1:44:2d:e9:55:3a:26:09:2f:fe:2e:3f:a2:b3:3f: cb:c8:58:bc:71:97:57:c5:e5:41:e7:21:7d:d1:9c:7a:05:20: 70:b7:73:1d:0f:15:ff:8f:c8:4e:0f:1d:c9:a3:e8:be:85:a5: 4f:e0:d1:1d:ee:12:05:24:5a:69:c4:80:49:65:fa:ba:00:e3: 85:52:59:e7:c9:45:d5:e0:7f:69:a2:5b:b3:2b:4b:0c:97:25: 9e:8e:11:43:e5:e9:a5:65:35:fb:81:48:c6:5a:34:c0:3c:8a: 85:c5:58:a2:fa:66:cd:42:18:84:b6:23:89:74:0e:b3:62:da: c6:80:c3:dc:b0:7b:59:5a:6c:d4:82:dc:dc:82:7d:02:a2:1a: 18:3a:ee:87:66:bc:cd:32:2a:9a:5b:9f:4c:95:54:aa:40:d7: 1b:21:94:e2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTJ5H7y/WyWwnxyDkFthFFjS1dGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUwMkRBMEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2 QjBDMzcxQjAeFw0yNjExMTUwMjA5MTFaFw0yNjExMTYwMzA4MTFaMDMxMTAvBgNV BAMTKEZEQkIxMTZERTlEQzdBODJGM0QwRDQ3NzdGODU2QTFGMTY0ODUwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24BJDj/+UV+OsXrqLnyHibLlr qyPyATwD+D0ol2yag4AmhtSiI/NeUBEdEI+7fnS2T9D7Dd65lWIQ8L52Vyns4dA8 NcE9sRczFJ6Ya/LU9bT9ouhpxFteomnuL3l6xiNM2yfOyp3hBsxGieXbarQFKTYa q6e6jW1WWvbw/RR/XhnERXdxM22AO7wpehRo8us/sndol/COrBpww6nBtm3D+aEJ dsQox6qNsRy8koHy1Q45pJqdBTggxE0phWs5GXd8JmLF34Vl/OLqXCUJudkfkaWO MsX8vY2j9YQgnz7TPrMLEybUC2AwjYF7iezoakoXwCAKpMKy+shWnrRh9aNvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/bsRbenceoLz0NR3f4VqHxZIUDUwHwYDVR0j BBgwFoAUvgLaDUT+kSlVRgIxoBhqSGsMNxswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1RXLzEvQkUwMkRBMEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2QjBDMzcxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC9CRTAyREEwRDQ0RkU5MTI5NTU0NjAyMzFB MDE4NkE0ODZCMEMzNzFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1RXLzEvQkUwMkRB MEQ0NEZFOTEyOTU1NDYwMjMxQTAxODZBNDg2QjBDMzcxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEEj QFX1Hoth38cAxrgRfK4wUXZ6cN+yylY72ty31raIZcJXFuGhu3uenAzDA2E2+OqV 0KhNe3gDY817pfP0Das8+tNRT7NFpqerqgqDwk71UekSqssH1aIo5FgIYtFELelV OiYJL/4uP6KzP8vIWLxxl1fF5UHnIX3RnHoFIHC3cx0PFf+PyE4PHcmj6L6FpU/g 0R3uEgUkWmnEgEll+roA44VSWefJRdXgf2miW7MrSwyXJZ6OEUPl6aVlNfuBSMZa NMA8ioXFWKL6Zs1CGIS2I4l0DrNi2saAw9ywe1labNSC3NyCfQKiGhg67odmvM0y Kppbn0yVVKpA1xshlOI= -----END CERTIFICATE-----Generated at Sun Nov 15 12:28:50 2026 by rpki-client