$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: lW/jByUy1wxx+sDzU4lL92qX4HCSJn1O105kZrU0Nco= Subject key identifier: AD:68:60:65:B5:57:6C:9E:36:CA:33:54:AB:68:1D:68:BB:05:A2:9A Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 59BF3A7D8D98F6791268437F6FE8D2A21EDA140D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: CD Signing time: Sun 11 Oct 2026 04:10:47 +0000 Manifest this update: Sun 11 Oct 2026 04:05:47 +0000 Manifest next update: Mon 12 Oct 2026 07:48:47 +0000 Files and hashes: 1: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 2: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) 3: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: gIHZdPcNZuTt6s7EnDe8fPcuP8snhQRB0U5xP6ALw2c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bf:3a:7d:8d:98:f6:79:12:68:43:7f:6f:e8:d2:a2:1e:da:14:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: Oct 11 04:05:47 2026 GMT Not After : Oct 12 07:48:47 2026 GMT Subject: CN=AD686065B5576C9E36CA3354AB681D68BB05A29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:fd:d3:ce:21:70:e2:bc:2d:43:f8:2c:59: 92:ce:57:33:30:95:ba:47:97:3c:2f:d3:3c:42:fa: b4:d4:a3:88:0e:36:b2:c0:81:73:01:14:6e:dc:82: 7e:6d:42:db:5b:c0:67:a2:d7:0a:9b:a0:39:84:06: 88:9f:be:84:46:de:1d:c4:e3:0a:e8:23:35:09:83: 61:23:d8:b1:94:90:e0:68:b2:7c:f2:11:93:a8:45: 88:08:9f:31:b6:3d:54:1f:82:47:df:30:fb:ad:55: b7:10:a7:80:99:86:9e:4e:5c:6f:c0:43:85:1d:e1: 7d:fc:a2:88:e6:98:a5:6d:25:0f:db:c9:8b:01:95: 59:38:de:eb:98:c9:19:de:1e:88:97:1f:6d:39:19: 80:5f:2f:b1:7c:ed:fa:3c:7e:be:ea:e8:3f:42:50: 46:5e:02:76:7a:42:da:c2:61:ea:18:16:75:ba:20: f7:1d:8f:2c:7c:ed:3b:6b:bd:bf:b4:d4:08:e5:cb: a5:24:c5:ea:c1:a1:37:02:b1:78:ac:69:c4:cf:51: 73:e3:bc:bf:df:28:a0:b9:dd:8a:c4:78:01:25:94: 8b:e5:39:ca:63:86:a8:86:3a:ea:39:b2:d2:6e:7c: f7:a8:59:85:2e:88:17:1d:39:9c:37:56:c8:d0:64: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:68:60:65:B5:57:6C:9E:36:CA:33:54:AB:68:1D:68:BB:05:A2:9A X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:45:d1:78:db:81:96:3e:4b:00:fa:7e:1b:f5:a7:96:03:96: 7b:16:eb:e2:ba:31:82:79:02:7a:a5:0f:22:f1:4c:8f:33:15: e5:60:d3:f2:51:83:81:a3:7d:2a:aa:29:4b:df:4c:d0:ea:d4: 4d:95:d3:84:65:37:13:15:5f:03:88:e4:48:ef:e8:2d:f9:40: 78:70:dc:da:b4:c9:18:b0:69:68:70:05:df:00:6d:09:0e:87: 70:f1:64:1f:15:c0:81:4e:3d:f0:e3:cf:90:4f:d1:f0:a5:6d: c6:a6:0e:e3:64:21:73:33:ee:cf:46:19:0c:09:1b:6d:04:44: b6:bc:fa:29:a9:32:23:d4:a8:08:2d:ea:51:4b:25:04:18:60: 4b:ba:dd:95:d8:f0:cd:f1:a4:f4:72:31:77:25:3c:69:9a:34: 28:04:bc:e2:00:c3:6a:73:5c:b8:ff:b9:64:6e:0b:e2:6a:a5: 12:ba:d7:63:1c:82:ec:e7:ef:e4:e2:3d:83:55:9b:2a:73:22: be:e9:93:e2:d8:0a:f4:3e:50:b2:4c:d5:1d:16:2e:cf:d0:7a: f4:52:da:11:09:f5:c1:04:9e:3b:db:f5:1d:72:96:6f:85:7a: f5:39:2a:3c:2a:ad:46:43:36:97:b2:3b:43:fc:39:e0:de:b0: f2:a3:15:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWb86fY2Y9nkSaEN/b+jSoh7aFA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjEwMTEwNDA1NDdaFw0yNjEwMTIwNzQ4NDdaMDMxMTAvBgNV BAMTKEFENjg2MDY1QjU1NzZDOUUzNkNBMzM1NEFCNjgxRDY4QkIwNUEyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/j/3TziFw4rwtQ/gsWZLOVzMw lbpHlzwv0zxC+rTUo4gONrLAgXMBFG7cgn5tQttbwGei1wqboDmEBoifvoRG3h3E 4wroIzUJg2Ej2LGUkOBosnzyEZOoRYgInzG2PVQfgkffMPutVbcQp4CZhp5OXG/A Q4Ud4X38oojmmKVtJQ/byYsBlVk43uuYyRneHoiXH205GYBfL7F87fo8fr7q6D9C UEZeAnZ6QtrCYeoYFnW6IPcdjyx87Ttrvb+01Ajly6UkxerBoTcCsXisacTPUXPj vL/fKKC53YrEeAEllIvlOcpjhqiGOuo5stJufPeoWYUuiBcdOZw3VsjQZGvXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUrWhgZbVXbJ42yjNUq2gdaLsFopowHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI1F 0XjbgZY+SwD6fhv1p5YDlnsW6+K6MYJ5AnqlDyLxTI8zFeVg0/JRg4GjfSqqKUvf TNDq1E2V04RlNxMVXwOI5Ejv6C35QHhw3Nq0yRiwaWhwBd8AbQkOh3DxZB8VwIFO PfDjz5BP0fClbcamDuNkIXMz7s9GGQwJG20ERLa8+impMiPUqAgt6lFLJQQYYEu6 3ZXY8M3xpPRyMXclPGmaNCgEvOIAw2pzXLj/uWRuC+JqpRK612Mcguzn7+TiPYNV mypzIr7pk+LYCvQ+ULJM1R0WLs/QevRS2hEJ9cEEnjvb9R1ylm+FevU5KjwqrUZD NpeyO0P8OeDesPKjFX4= -----END CERTIFICATE-----Generated at Sun Oct 11 06:18:49 2026 by rpki-client