$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: 7PlY2Nxq6GkHG1pajhJtBAC1KsO2fGCSh5KTJB/9LVs= Subject key identifier: D3:2C:6D:C8:3B:89:51:0A:1B:10:FC:78:47:E9:8F:8E:60:29:B2:99 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 31906C11C0829C308ED81EEFF0B1D25860FD29A8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: B9 Signing time: Sat 26 Sep 2026 08:45:46 +0000 Manifest this update: Sat 26 Sep 2026 08:40:46 +0000 Manifest next update: Sun 27 Sep 2026 10:11:46 +0000 Files and hashes: 1: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) 2: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 3: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: IoWI5l1e6gq1agDXn0sWdnZW44vMhR+s0YPBvEqAXIg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 06:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:6c:11:c0:82:9c:30:8e:d8:1e:ef:f0:b1:d2:58:60:fd:29:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Sep 26 08:40:46 2026 GMT Not After : Sep 27 10:11:46 2026 GMT Subject: CN=D32C6DC83B89510A1B10FC7847E98F8E6029B299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:07:af:41:71:fc:d1:30:2d:72:c8:ff:ce: df:e6:2e:d9:8f:14:d7:43:b2:b7:94:66:6b:71:17: b3:48:31:3c:7c:d4:82:56:a3:f9:19:ec:b2:68:21: 90:f9:ab:17:46:29:f8:13:fe:1e:f1:5d:c7:0d:d4: 92:1c:b0:ca:3b:35:62:9a:59:fb:52:72:db:b9:c6: ff:ef:73:70:53:72:e3:6d:d6:c5:71:75:63:f2:a5: 77:94:c9:f7:a7:08:c6:71:f3:c5:ba:09:90:42:65: 9c:cc:bb:4b:02:fe:0e:cb:ce:43:45:ec:fe:c4:7b: de:81:94:b6:13:22:19:67:bb:5b:60:78:ec:09:8c: 05:43:e6:ca:03:a6:41:7d:9e:d9:a2:13:f8:d1:2b: 43:48:80:6f:4a:af:b7:e0:f3:60:37:fc:98:ce:13: 2c:b1:45:ad:9c:5e:e7:21:5c:b4:7d:49:83:e1:eb: 61:bc:83:69:93:3e:3e:83:17:3d:60:5c:6b:d8:d8: 60:dc:de:83:85:92:1f:52:5e:7f:51:0e:9b:95:29: a0:60:d2:7a:aa:af:19:2b:26:f2:25:4a:e5:9c:58: b1:56:00:eb:b3:b3:d6:66:23:a9:9d:04:b0:83:2c: 59:20:eb:f2:5f:6e:62:e1:54:5f:b7:a2:af:7b:fc: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2C:6D:C8:3B:89:51:0A:1B:10:FC:78:47:E9:8F:8E:60:29:B2:99 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:23:e6:fe:a5:a1:b7:e8:c4:a2:60:bf:56:c1:df:69:c4: cc:75:f8:5b:07:ad:0c:d4:0b:39:0b:70:67:8a:16:38:07:22: 59:5b:53:61:a5:23:52:cd:ad:29:5b:87:69:fa:dd:fb:79:22: 06:11:1e:b8:9c:2b:6e:dc:b8:9e:a9:99:2f:6a:e2:32:21:71: e8:41:3b:99:3c:75:bb:9d:a5:24:a5:ad:26:67:74:2c:79:5f: 17:85:ab:d7:72:30:79:e2:02:9a:cb:db:48:6d:07:de:85:ce: 02:ae:85:8d:26:95:2f:50:fc:a8:cd:72:97:be:ae:7d:0e:1f: 57:9e:03:b3:80:27:36:0d:e3:ec:c4:0c:5c:62:60:5f:7c:89: ec:e6:44:fa:87:6b:5a:0c:10:94:2a:34:b1:ac:c5:46:d4:ec: cf:2f:7b:d6:40:ae:42:cd:a7:8b:af:bd:18:ad:fa:c8:d7:08: 33:d5:0f:51:1c:8e:2d:71:55:da:32:82:41:27:cc:96:f5:35: 29:58:d4:b1:52:7a:2e:f4:5d:6e:7b:89:bf:ab:34:ba:8d:93: 55:be:32:19:fe:e7:c4:1e:91:00:0d:80:d2:ea:90:da:53:0f: b1:ad:34:c0:50:52:1c:36:55:c1:3d:28:89:c1:40:3d:9c:e3: 26:e5:1b:1d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMZBsEcCCnDCO2B7v8LHSWGD9KagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA5MjYwODQwNDZaFw0yNjA5MjcxMDExNDZaMDMxMTAvBgNV BAMTKEQzMkM2REM4M0I4OTUxMEExQjEwRkM3ODQ3RTk4RjhFNjAyOUIyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7QevQXH80TAtcsj/zt/mLtmP FNdDsreUZmtxF7NIMTx81IJWo/kZ7LJoIZD5qxdGKfgT/h7xXccN1JIcsMo7NWKa WftSctu5xv/vc3BTcuNt1sVxdWPypXeUyfenCMZx88W6CZBCZZzMu0sC/g7LzkNF 7P7Ee96BlLYTIhlnu1tgeOwJjAVD5soDpkF9ntmiE/jRK0NIgG9Kr7fg82A3/JjO EyyxRa2cXuchXLR9SYPh62G8g2mTPj6DFz1gXGvY2GDc3oOFkh9SXn9RDpuVKaBg 0nqqrxkrJvIlSuWcWLFWAOuzs9ZmI6mdBLCDLFkg6/JfbmLhVF+3oq97/FetAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU0yxtyDuJUQobEPx4R+mPjmApspkwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI0p I+b+paG36MSiYL9Wwd9pxMx1+FsHrQzUCzkLcGeKFjgHIllbU2GlI1LNrSlbh2n6 3ft5IgYRHricK27cuJ6pmS9q4jIhcehBO5k8dbudpSSlrSZndCx5XxeFq9dyMHni AprL20htB96FzgKuhY0mlS9Q/KjNcpe+rn0OH1eeA7OAJzYN4+zEDFxiYF98iezm RPqHa1oMEJQqNLGsxUbU7M8ve9ZArkLNp4uvvRit+sjXCDPVD1Ecji1xVdoygkEn zJb1NSlY1LFSei70XW57ib+rNLqNk1W+Mhn+58QekQANgNLqkNpTD7GtNMBQUhw2 VcE9KInBQD2c4yblGx0= -----END CERTIFICATE-----Generated at Sat Sep 26 13:03:19 2026 by rpki-client