
$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft
File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json)
Hash identifier: SL6qoql5TrMx/1Fsi1Z25/AkytGFEKRUWW9jv1H+I0U=
Subject key identifier: 83:AB:0E:B2:EB:37:95:DB:6B:FD:C3:6C:D6:55:E9:0F:82:0B:CB:1D
Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09
Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709
Certificate serial: 21E72C6EC38A29EDF85224B8B96EE2609498E4B8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft
Manifest number: 43
Signing time: Mon 29 Jun 2026 18:42:14 +0000
Manifest this update: Mon 29 Jun 2026 18:37:14 +0000
Manifest next update: Tue 30 Jun 2026 20:48:14 +0000
Files and hashes: 1: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=)
2: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=)
3: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: SqvzRVY4hHqWUoN4Ny8LYI+f0u4uD73/iiFrL7ZDmxg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl
rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 19:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e7:2c:6e:c3:8a:29:ed:f8:52:24:b8:b9:6e:e2:60:94:98:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709
Validity
Not Before: Jun 29 18:37:14 2026 GMT
Not After : Jun 30 20:48:14 2026 GMT
Subject: CN=83AB0EB2EB3795DB6BFDC36CD655E90F820BCB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:d7:6e:bd:57:60:6f:a8:7c:4e:6a:1b:e7:
e1:d0:77:f7:b9:ec:ef:54:45:4e:cd:02:11:e8:3b:
44:6c:09:ea:85:eb:15:39:b9:9f:71:ab:59:50:ce:
d1:86:90:ef:ba:fa:38:d2:c1:37:68:15:8e:27:53:
b6:cb:34:42:4e:6a:e2:1a:49:6e:92:11:a4:0a:3e:
81:55:1e:f7:9e:79:42:0f:6b:3f:f4:5a:85:d0:9b:
04:02:4a:47:dd:f2:96:c9:45:59:26:0b:17:2d:4f:
9b:52:fd:a8:12:a0:bb:5e:3b:cc:c0:26:68:f9:63:
1d:61:26:ca:9b:67:8e:1a:f2:5f:e4:aa:ba:2f:54:
5c:5f:7a:52:0e:1b:cc:78:2b:fc:09:0a:18:27:8a:
26:6c:9c:cc:a6:3c:39:55:b5:3e:90:05:8e:99:a2:
a2:dd:47:d3:e7:06:36:b9:f4:1a:71:20:63:49:f3:
3e:dd:25:cb:53:9c:a7:48:e4:20:9e:1c:83:ef:13:
13:e4:07:97:a6:df:19:5d:a3:df:87:50:0f:91:97:
75:0e:05:ec:76:9e:6c:1b:23:01:da:b1:32:fd:02:
7f:7d:78:1e:32:94:2c:0f:0c:e6:ab:1c:33:3f:69:
60:12:2f:ef:1f:cb:ac:d0:e4:77:05:1e:3a:48:f6:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:0E:B2:EB:37:95:DB:6B:FD:C3:6C:D6:55:E9:0F:82:0B:CB:1D
X509v3 Authority Key Identifier:
keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:4b:eb:7c:11:33:d0:10:0c:3d:e6:f4:2b:07:5f:87:17:
dc:4d:41:a9:07:45:a2:d6:1c:8a:c5:35:83:b5:da:82:86:3e:
b9:88:09:2d:ed:c4:cc:d1:6d:97:ff:a0:1e:22:fc:a1:49:95:
1d:99:c5:d8:8d:ed:b6:2f:36:ff:9a:73:db:8b:7f:82:94:f9:
5e:3c:bf:28:10:df:db:e8:09:ac:93:71:d6:4f:3c:d9:c2:4d:
a4:1b:67:ed:03:13:fd:24:3a:51:d3:7b:77:b3:31:86:8a:8b:
fb:c1:f4:65:bc:e2:8b:b6:7b:97:fd:df:ac:92:dc:10:3e:f4:
61:95:2b:be:cf:13:45:2d:91:e1:63:9b:19:9a:bd:7f:f9:78:
59:f4:5f:71:32:0d:56:46:e4:4e:25:c3:78:88:15:e9:ed:36:
b7:53:e5:fd:b9:0f:ca:fe:3e:0c:9c:30:70:06:ed:81:2b:42:
18:fd:0a:50:a9:40:51:ba:7f:c3:5c:15:ba:00:01:50:bd:55:
a2:c8:11:d4:78:5a:f3:57:25:7e:af:34:0a:c5:39:58:b8:ce:
02:11:44:99:3d:11:4d:d0:03:06:fe:56:b7:45:95:3e:95:b9:
4f:85:a7:d9:cc:93:32:3e:57:fb:3b:61:1f:ed:71:7b:19:10:
3d:db:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:12:29 2026 by rpki-client