$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: Jcthh1ETu9Tw8677PrVtmBMKHwb/QIACetHqxhRseS0= Subject key identifier: C8:55:D2:2B:E8:E2:AC:F7:57:61:01:54:1D:41:DF:06:4D:7E:DA:96 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 527BE0F757C5B9B3B1F8E03B7AC9B8C6316C0BB0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: 81 Signing time: Sat 15 Aug 2026 03:39:14 +0000 Manifest this update: Sat 15 Aug 2026 03:34:14 +0000 Manifest next update: Sun 16 Aug 2026 05:17:14 +0000 Files and hashes: 1: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 2: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: p+lgk/rpbib88FHFf5EpEZqlrlRcmLDe+n8zf4WXaVo=) 3: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7b:e0:f7:57:c5:b9:b3:b1:f8:e0:3b:7a:c9:b8:c6:31:6c:0b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Aug 15 03:34:14 2026 GMT Not After : Aug 16 05:17:14 2026 GMT Subject: CN=C855D22BE8E2ACF7576101541D41DF064D7EDA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:43:6c:a0:f9:ce:50:29:c9:3b:9c:9b:96: f3:08:04:4a:53:e2:96:e2:84:53:a0:e1:2f:b5:a5: c5:04:7b:ed:31:7d:ee:bf:72:fc:11:aa:5e:53:c3: e1:41:65:45:e4:63:e1:88:f9:ae:e6:16:5c:fb:86: c4:9f:50:84:3c:98:6f:df:cc:47:f4:17:de:70:76: f4:7b:97:9a:db:94:8d:d1:1e:71:ba:d5:6b:e5:a6: 1d:7c:ea:77:f6:79:37:fa:36:54:6e:2b:76:2e:30: ca:bf:05:03:da:55:05:1c:38:5d:bc:05:ca:16:d4: 81:7d:b3:a5:cd:2d:4e:6b:82:61:b2:08:4a:55:4f: c8:42:8a:8d:ce:a2:c7:a3:81:95:73:de:7c:e1:e4: 14:20:d1:d6:71:e4:10:f9:71:d8:0e:fc:bc:fb:e1: a2:75:37:7e:1d:2c:89:3c:3c:e1:01:a8:53:66:34: 06:62:83:f9:7d:74:c4:96:28:d1:91:e9:5b:0b:d3: 65:ea:fe:82:fb:c3:db:0e:44:8f:d6:f3:75:db:f9: 02:56:00:7c:24:bd:f7:91:10:1f:78:de:8d:ca:91: 1a:d6:26:c3:0f:6e:fe:21:85:5b:91:f8:22:3b:06: 0c:b6:34:ba:c7:8f:1c:0e:f4:38:fd:5a:77:bf:7c: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:D2:2B:E8:E2:AC:F7:57:61:01:54:1D:41:DF:06:4D:7E:DA:96 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0e:4a:f3:b7:d3:02:28:6a:6f:4c:26:a2:f5:fa:7a:94:c7: fd:79:0a:8b:7b:4c:a8:bd:95:53:07:18:99:cb:12:25:30:d5: c5:8a:10:4d:c4:a8:1e:fb:8e:26:80:cb:32:b1:6e:38:cf:bd: 9c:21:4e:ed:9e:d1:f3:2b:f7:1b:40:c5:9f:e2:2f:2b:eb:20: da:59:a5:d1:2c:08:41:1a:e0:c3:86:71:37:e3:fc:4c:82:36: 37:a8:0a:af:1d:4f:b8:f7:0b:ba:e4:43:2e:d5:30:94:98:ef: ee:e8:30:31:31:64:5a:38:a9:6f:10:34:d6:81:84:81:42:b6: 24:e3:da:69:4e:f7:0c:d3:5d:b7:f0:5d:61:0b:18:f2:36:01: 10:2c:34:a9:1e:89:fe:1c:d5:9c:80:46:3b:2c:d0:7e:b7:53: 3e:8c:a0:af:ad:10:da:b1:9e:1b:ee:cc:f8:9b:81:3b:2e:8c: e4:29:63:50:b1:eb:1b:21:6d:c0:d0:09:ba:a2:a4:2b:bd:ac: 69:09:0b:d4:80:a9:18:3e:63:7c:7b:31:9c:1e:8a:6d:a0:69: 4b:dd:fb:e2:a3:e3:5f:2a:c6:74:a9:61:8b:0a:fe:13:2e:ea: a0:ef:bd:17:64:e2:9a:0d:ce:0b:e4:34:9d:85:51:a2:1e:05: 6b:af:71:33 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUnvg91fFubOx+OA7esm4xjFsC7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA4MTUwMzM0MTRaFw0yNjA4MTYwNTE3MTRaMDMxMTAvBgNV BAMTKEM4NTVEMjJCRThFMkFDRjc1NzYxMDE1NDFENDFERjA2NEQ3RURBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JENsoPnOUCnJO5yblvMIBEpT 4pbihFOg4S+1pcUEe+0xfe6/cvwRql5Tw+FBZUXkY+GI+a7mFlz7hsSfUIQ8mG/f zEf0F95wdvR7l5rblI3RHnG61Wvlph186nf2eTf6NlRuK3YuMMq/BQPaVQUcOF28 BcoW1IF9s6XNLU5rgmGyCEpVT8hCio3OosejgZVz3nzh5BQg0dZx5BD5cdgO/Lz7 4aJ1N34dLIk8POEBqFNmNAZig/l9dMSWKNGR6VsL02Xq/oL7w9sORI/W83Xb+QJW AHwkvfeREB943o3KkRrWJsMPbv4hhVuR+CI7Bgy2NLrHjxwO9Dj9Wne/fGR1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyFXSK+jirPdXYQFUHUHfBk1+2pYwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIIO SvO30wIoam9MJqL1+nqUx/15Cot7TKi9lVMHGJnLEiUw1cWKEE3EqB77jiaAyzKx bjjPvZwhTu2e0fMr9xtAxZ/iLyvrINpZpdEsCEEa4MOGcTfj/EyCNjeoCq8dT7j3 C7rkQy7VMJSY7+7oMDExZFo4qW8QNNaBhIFCtiTj2mlO9wzTXbfwXWELGPI2ARAs NKkeif4c1ZyARjss0H63Uz6MoK+tENqxnhvuzPibgTsujOQpY1Cx6xshbcDQCbqi pCu9rGkJC9SAqRg+Y3x7MZweim2gaUvd++Kj418qxnSpYYsK/hMu6qDvvRdk4poN zgvkNJ2FUaIeBWuvcTM= -----END CERTIFICATE-----Generated at Sat Aug 15 10:25:52 2026 by rpki-client