$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: CGt5dq7Gs9c44cVNJwe5N5uJwfy9W9ys05kwz/JqeQg= Subject key identifier: 38:E2:EA:4F:20:3F:E2:D1:D7:89:70:21:53:23:AF:39:13:FF:25:B7 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 38692625DD2803D9C77F8B566283D57C0EC4DC2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: 63 Signing time: Thu 23 Jul 2026 17:21:15 +0000 Manifest this update: Thu 23 Jul 2026 17:16:15 +0000 Manifest next update: Fri 24 Jul 2026 19:57:15 +0000 Files and hashes: 1: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: A8yNTp0tQ2BLvjWSOTIqWd7TsC3j4j02kN9DTT29MzU=) 2: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 3: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:69:26:25:dd:28:03:d9:c7:7f:8b:56:62:83:d5:7c:0e:c4:dc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Jul 23 17:16:15 2026 GMT Not After : Jul 24 19:57:15 2026 GMT Subject: CN=38E2EA4F203FE2D1D78970215323AF3913FF25B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:eb:63:a1:59:96:4b:be:a4:35:c2:4c:d6:42: e0:63:ba:19:2d:61:50:c8:8a:21:39:e8:c6:31:ec: 67:eb:2a:42:ca:7d:74:7e:4a:b1:8c:dc:d2:c8:76: 8c:af:9c:b3:76:b9:c0:d9:1e:ae:a1:b5:cd:49:4b: 5a:59:c5:18:82:d9:61:d2:6e:fc:dd:75:ae:9b:1d: da:5f:08:e1:c6:c7:00:b1:11:16:76:35:64:dd:f4: e6:fb:6b:8c:99:97:ff:01:82:d4:6d:5d:d7:3e:ab: a1:07:25:14:f2:dc:93:33:b5:ba:a9:2b:02:00:ec: 19:09:19:d6:e8:cf:4f:2d:b9:5a:41:0e:0d:ed:99: 9e:43:54:13:92:a3:33:d5:d8:a4:13:48:27:cc:2d: 04:36:70:6b:ea:ab:fd:d4:50:f5:ea:44:82:24:17: cc:8a:a9:42:13:23:8c:f8:74:e5:2d:f9:92:81:bb: b2:88:6a:42:7f:00:5f:c6:ec:54:a4:d1:8f:85:bc: a3:7c:17:11:88:c1:5a:3a:56:6a:5d:40:ca:b4:e9: 2e:ed:66:3b:97:2c:6f:9d:00:d1:f4:7c:37:a4:f4: a1:c2:d3:f4:de:34:2a:96:e4:ef:24:0b:77:b7:fc: ee:42:01:4c:2a:dd:e7:21:c5:9c:b2:d3:16:0a:95: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E2:EA:4F:20:3F:E2:D1:D7:89:70:21:53:23:AF:39:13:FF:25:B7 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cc:f9:0a:63:83:69:b4:df:6e:e5:b9:15:59:a0:a6:31:69: 75:5c:78:68:48:f3:e6:58:22:e1:5e:2a:e6:d3:b9:7c:5d:1d: 41:8f:9d:07:44:43:3b:b7:9d:7b:0f:03:40:05:69:b5:04:a0: 47:f1:1c:13:ae:6c:37:c1:68:20:8e:e0:bf:47:a1:f3:a6:f0: 8f:93:00:0e:9a:ba:c2:72:ce:6c:38:4d:bd:12:03:13:25:c7: db:33:46:99:61:5f:84:11:42:7f:ff:82:4a:89:0e:ae:f3:07: 88:9d:aa:53:73:62:32:32:16:b7:09:14:55:4a:09:d3:0e:59: 2c:d8:ea:9e:48:1b:b8:3a:98:e8:f9:18:02:40:7f:b2:74:f4: 16:ab:e0:87:d1:d0:21:e4:c8:03:ce:d7:40:ec:a3:40:7f:9f: b2:f7:45:e6:e2:34:d3:86:f0:ed:de:db:a5:e3:6c:3e:b9:84: 4c:d3:05:bd:1b:da:ac:f5:81:c7:01:02:74:f2:58:30:d2:fa: 47:47:dc:5c:52:41:f8:33:c4:3f:43:c3:ce:be:4f:b3:7e:ad: 6e:15:09:ec:d1:c4:5f:65:51:6f:96:98:c6:5f:63:23:72:9e: 86:6d:1d:9c:bd:5c:25:29:ed:9e:af:d8:bb:de:dd:74:ce:94: c2:4d:6e:ef -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOGkmJd0oA9nHf4tWYoPVfA7E3CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA3MjMxNzE2MTVaFw0yNjA3MjQxOTU3MTVaMDMxMTAvBgNV BAMTKDM4RTJFQTRGMjAzRkUyRDFENzg5NzAyMTUzMjNBRjM5MTNGRjI1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq62OhWZZLvqQ1wkzWQuBjuhkt YVDIiiE56MYx7GfrKkLKfXR+SrGM3NLIdoyvnLN2ucDZHq6htc1JS1pZxRiC2WHS bvzdda6bHdpfCOHGxwCxERZ2NWTd9Ob7a4yZl/8BgtRtXdc+q6EHJRTy3JMztbqp KwIA7BkJGdboz08tuVpBDg3tmZ5DVBOSozPV2KQTSCfMLQQ2cGvqq/3UUPXqRIIk F8yKqUITI4z4dOUt+ZKBu7KIakJ/AF/G7FSk0Y+FvKN8FxGIwVo6VmpdQMq06S7t ZjuXLG+dANH0fDek9KHC0/TeNCqW5O8kC3e3/O5CAUwq3echxZyy0xYKldfvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOOLqTyA/4tHXiXAhUyOvORP/JbcwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ7M +Qpjg2m0327luRVZoKYxaXVceGhI8+ZYIuFeKubTuXxdHUGPnQdEQzu3nXsPA0AF abUEoEfxHBOubDfBaCCO4L9HofOm8I+TAA6ausJyzmw4Tb0SAxMlx9szRplhX4QR Qn//gkqJDq7zB4idqlNzYjIyFrcJFFVKCdMOWSzY6p5IG7g6mOj5GAJAf7J09Bar 4IfR0CHkyAPO10Dso0B/n7L3RebiNNOG8O3e26XjbD65hEzTBb0b2qz1gccBAnTy WDDS+kdH3FxSQfgzxD9Dw86+T7N+rW4VCezRxF9lUW+WmMZfYyNynoZtHZy9XCUp 7Z6v2Lve3XTOlMJNbu8= -----END CERTIFICATE-----Generated at Fri Jul 24 13:33:49 2026 by rpki-client