$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft File: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft (raw, json) Hash identifier: 7EFqhp2uLjqHwAzTlQXXoV/rLhps/tIgorTYsURgQNI= Subject key identifier: 95:4A:F1:44:14:29:CC:94:B8:93:DF:D0:68:FA:F5:A9:2D:5F:DA:08 Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 4B311EF947BAC47CEDAD61F9ABFFA183EB61C3FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft Manifest number: 08 Signing time: Fri 15 May 2026 10:46:46 +0000 Manifest this update: Fri 15 May 2026 10:41:46 +0000 Manifest next update: Sat 16 May 2026 12:11:46 +0000 Files and hashes: 1: 3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (hash: q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=) 2: 8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl (hash: Iu5YnKhDioozTnY3JuIW3HPK+nf+KbKoz4ymT6Hf+40=) 3: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (hash: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 12:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:31:1e:f9:47:ba:c4:7c:ed:ad:61:f9:ab:ff:a1:83:eb:61:c3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: May 15 10:41:46 2026 GMT Not After : May 16 12:11:46 2026 GMT Subject: CN=954AF1441429CC94B893DFD068FAF5A92D5FDA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:31:e1:c1:c7:01:c9:0b:21:8e:47:57:d4:bf: 2b:5e:93:85:42:4b:2b:c5:48:d7:36:41:cf:36:93: 19:b8:a4:d4:a3:2e:65:7d:f8:6c:80:99:73:ac:6a: 2e:e9:f2:4e:6c:c7:dd:c5:e9:4f:61:42:c8:a2:ff: 8b:7a:1d:63:f3:d6:40:0a:ba:31:52:9c:77:8e:d5: 24:43:73:ba:11:71:38:d7:87:93:d2:ea:e4:6f:be: a6:44:2a:79:9f:0e:b3:21:98:b3:e6:3a:6e:12:06: 5f:18:83:2c:2f:40:42:4a:db:e6:d5:c2:b1:6a:57: 07:62:02:04:ea:49:0d:49:6c:c6:ac:57:fb:d6:61: 4a:c9:24:0f:5a:14:b3:7d:1c:f1:58:85:33:45:d7: ca:8f:77:30:29:e0:46:d7:dc:01:b2:5c:6d:c9:22: 98:b7:b9:b7:f3:9f:47:aa:90:cc:43:3c:54:c5:07: b8:79:59:be:b9:bf:56:08:39:2c:df:7e:8e:82:6e: ae:83:38:ac:ed:47:d0:e5:6f:a3:6e:f8:f0:bd:02: 27:af:79:ed:fa:ee:c1:6f:57:bd:de:87:5c:48:24: 7e:b9:12:be:b4:38:b2:a8:1b:88:ce:d0:54:b6:91: c4:e4:de:ed:0b:53:e8:ef:c3:61:65:27:79:b0:da: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:F1:44:14:29:CC:94:B8:93:DF:D0:68:FA:F5:A9:2D:5F:DA:08 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cb:4e:bf:0a:ac:4d:bb:ec:d0:b0:b4:a8:d0:9e:b7:8e:c9: 14:58:28:67:9e:68:cc:e9:09:fa:ca:1d:c8:1b:23:25:b9:b9: dd:06:d0:de:f4:bc:8a:0e:2b:d4:3a:86:ce:67:99:c1:e1:aa: 40:a7:42:69:68:50:2e:61:b9:e2:4a:b9:03:6d:b4:87:66:76: 3a:1d:10:0c:82:b1:cf:2b:55:fb:72:36:f7:05:4d:40:a8:3b: 79:53:08:50:3a:f0:65:32:4e:0c:cf:d1:81:4f:20:eb:5d:19: 44:39:e5:0b:28:b0:d4:2f:d1:c0:12:66:94:2f:de:75:e8:3d: 7e:ac:52:21:e5:d9:ba:82:d0:79:78:b1:bc:6d:f1:96:44:37: 3e:0f:54:32:47:ff:09:a9:f5:4c:bf:74:11:f7:ea:b0:6d:17: c5:10:f3:63:d3:f6:4d:f0:7d:7e:59:48:63:4b:48:94:d6:17: f4:4d:2e:e0:cf:a4:a6:22:12:13:4b:7d:76:62:23:de:ff:b3: d5:17:0b:7a:91:7b:8c:c2:d6:4e:2e:47:5f:72:19:c4:c0:51: 9b:2e:6c:5e:81:7a:55:0e:16:6a:e5:be:d7:e4:da:d3:ad:d3: 97:f4:87:df:08:e6:01:2b:0b:ef:d5:1f:43:df:f6:c2:6c:8c: fe:18:30:a8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSzEe+Ue6xHztrWH5q/+hg+thw/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA1MTUxMDQxNDZaFw0yNjA1MTYxMjExNDZaMDMxMTAvBgNV BAMTKDk1NEFGMTQ0MTQyOUNDOTRCODkzREZEMDY4RkFGNUE5MkQ1RkRBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxMeHBxwHJCyGOR1fUvytek4VC SyvFSNc2Qc82kxm4pNSjLmV9+GyAmXOsai7p8k5sx93F6U9hQsii/4t6HWPz1kAK ujFSnHeO1SRDc7oRcTjXh5PS6uRvvqZEKnmfDrMhmLPmOm4SBl8YgywvQEJK2+bV wrFqVwdiAgTqSQ1JbMasV/vWYUrJJA9aFLN9HPFYhTNF18qPdzAp4EbX3AGyXG3J Ipi3ubfzn0eqkMxDPFTFB7h5Wb65v1YIOSzffo6Cbq6DOKztR9Dlb6Nu+PC9Aiev ee367sFvV73eh1xIJH65Er60OLKoG4jO0FS2kcTk3u0LU+jvw2FlJ3mw2qmlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUlUrxRBQpzJS4k9/QaPr1qS1f2ggwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvOEE1QkY0 N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFvL Tr8KrE277NCwtKjQnreOyRRYKGeeaMzpCfrKHcgbIyW5ud0G0N70vIoOK9Q6hs5n mcHhqkCnQmloUC5hueJKuQNttIdmdjodEAyCsc8rVftyNvcFTUCoO3lTCFA68GUy TgzP0YFPIOtdGUQ55QsosNQv0cASZpQv3nXoPX6sUiHl2bqC0Hl4sbxt8ZZENz4P VDJH/wmp9Uy/dBH36rBtF8UQ82PT9k3wfX5ZSGNLSJTWF/RNLuDPpKYiEhNLfXZi I97/s9UXC3qRe4zC1k4uR19yGcTAUZsubF6BelUOFmrlvtfk2tOt05f0h98I5gEr C+/VH0Pf9sJsjP4YMKg= -----END CERTIFICATE-----Generated at Sat May 16 04:56:31 2026 by rpki-client