$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft File: HpTC6b92VEpaAMOici0QgCJOwA4.mft (raw, json) Hash identifier: 3F5m/8hR6r7nqph8KfE7UXq5Nm7xnSBpi0LjjlM+ZZw= Subject key identifier: BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC Authority key identifier: 1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E Certificate issuer: /CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E Certificate serial: 017E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft Manifest number: 017E Signing time: Tue 28 Oct 2025 17:56:49 +0000 Manifest this update: Tue 28 Oct 2025 17:56:49 +0000 Manifest next update: Tue 28 Oct 2025 23:56:49 +0000 Files and hashes: 1: HpTC6b92VEpaAMOici0QgCJOwA4.crl (hash: u9dajwSwRccsUvE6pItMTS2cXq9MHLeO1aKAkNRNjiA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 23:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E Validity Not Before: Oct 28 17:56:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BEED3C841F9D8994442239C237DE55EADB5FDBEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:18:37:f4:2f:66:58:8d:30:6b:37:13:7c: b6:4e:01:75:a9:ac:b7:94:02:c5:bf:81:56:33:28: b8:89:5b:a7:e6:e4:78:71:3d:57:43:ec:db:8a:44: 76:05:67:41:4d:ec:00:7b:8e:29:28:ce:bf:2a:9c: ba:62:50:ab:c2:13:00:8e:bd:0c:b0:d8:64:1e:eb: bb:a5:54:59:8a:56:62:e3:4b:43:44:af:1d:3b:da: 8c:8e:76:07:99:ff:9f:5b:49:50:b7:d4:88:a6:3f: 86:cc:13:ec:da:ec:09:f0:ae:e1:59:1c:e8:b0:d1: 57:bc:dd:26:03:03:ef:f8:ec:a4:53:34:4d:05:54: 32:fa:61:57:b3:6a:7f:2f:72:fc:fc:aa:dc:d2:9f: c0:45:53:8c:c4:45:6c:8e:52:67:a2:20:12:46:18: 80:8a:1a:79:22:b6:5d:11:b2:80:5a:e9:9a:ab:79: 01:c2:a9:51:8b:38:3a:d6:00:2b:3c:5e:d6:7a:6e: c8:0a:64:d8:ee:8a:87:a3:06:d5:2e:77:44:a6:e3: 26:36:b3:2c:60:26:75:76:c4:e1:7d:a2:20:cd:1f: a2:f2:da:ce:aa:2c:77:84:61:2f:d1:18:f6:d2:b9: be:99:da:0a:ab:6c:ff:cc:b0:5e:5d:34:63:e1:f3: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC X509v3 Authority Key Identifier: keyid:1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:05:eb:e8:50:ff:2d:08:56:f9:53:1d:ee:7f:40:4f:93: d1:fc:3c:c2:7a:9b:83:11:4c:0d:28:c3:e4:54:86:0a:06:9e: af:fb:9a:bc:bc:4e:41:5c:74:cf:28:cd:5f:64:58:f3:a3:66: 4d:22:7c:f0:7f:e6:55:a6:8d:29:c5:c4:8f:f3:8d:44:08:13: 14:49:7d:e5:af:09:8a:2f:a8:4e:49:cf:e4:61:9e:83:5f:46: b1:44:a5:91:95:7c:cf:d4:53:9b:9e:3c:f5:56:c9:41:7c:59: 11:97:8b:99:c2:b9:26:64:c8:4b:e1:fe:c8:36:08:86:86:b5: 30:c3:ae:8a:bf:29:fa:df:72:ba:6e:50:8f:49:16:7c:12:7c: 86:65:f0:11:f5:52:3b:5a:03:fe:d9:83:6a:31:95:c5:a6:72: 1e:7b:88:50:57:24:bb:46:f7:64:45:e4:40:38:4b:41:8c:68: a0:fa:2c:2b:e9:42:f1:b0:15:e0:54:4e:6f:33:7c:57:95:56: b3:60:53:74:b0:db:70:df:23:d8:28:74:64:89:ac:e9:7f:a2: d4:e1:84:c3:48:c3:b7:84:b2:7d:fb:43:b7:2a:be:9c:c8:be: 12:5b:e4:d6:f7:4d:5e:71:10:b5:25:8a:27:d7:f0:7c:96:b1: 87:b6:79:d8 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUU5 NEMyRTlCRjc2NTQ0QTVBMDBDM0EyNzIyRDEwODAyMjRFQzAwRTAeFw0yNTEwMjgx NzU2NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFRUQzQzg0MUY5RDg5 OTQ0NDIyMzlDMjM3REU1NUVBREI1RkRCRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIJRg39C9mWI0wazcTfLZOAXWprLeUAsW/gVYzKLiJW6fm5Hhx PVdD7NuKRHYFZ0FN7AB7jikozr8qnLpiUKvCEwCOvQyw2GQe67ulVFmKVmLjS0NE rx072oyOdgeZ/59bSVC31IimP4bME+za7AnwruFZHOiw0Ve83SYDA+/47KRTNE0F VDL6YVezan8vcvz8qtzSn8BFU4zERWyOUmeiIBJGGICKGnkitl0RsoBa6ZqreQHC qVGLODrWACs8XtZ6bsgKZNjuioejBtUud0Sm4yY2syxgJnV2xOF9oiDNH6Ly2s6q LHeEYS/RGPbSub6Z2gqrbP/MsF5dNGPh8z6nAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUvu08hB+diZREIjnCN95V6ttf2+wwHwYDVR0jBBgwFoAUHpTC6b92VEpaAMOi ci0QgCJOwA4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREJTQkFO S1RXL0hwVEM2YjkyVkVwYUFNT2ljaTBRZ0NKT3dBNC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvSHBUQzZiOTJWRXBhQU1PaWNpMFFnQ0pPd0E0LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREJTQkFOS1RXL0hwVEM2YjkyVkVw YUFNT2ljaTBRZ0NKT3dBNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBSTgXr6FD/LQhW+VMd7n9AT5PR/DzCepuDEUwNKMPkVIYKBp6v+5q8vE5B XHTPKM1fZFjzo2ZNInzwf+ZVpo0pxcSP841ECBMUSX3lrwmKL6hOSc/kYZ6DX0ax RKWRlXzP1FObnjz1VslBfFkRl4uZwrkmZMhL4f7INgiGhrUww66Kvyn633K6blCP SRZ8EnyGZfAR9VI7WgP+2YNqMZXFpnIee4hQVyS7RvdkReRAOEtBjGig+iwr6ULx sBXgVE5vM3xXlVazYFN0sNtw3yPYKHRkiazpf6LU4YTDSMO3hLJ9+0O3Kr6cyL4S W+TW901ecRC1JYon1/B8lrGHtnnY -----END CERTIFICATE-----Generated at Tue Oct 28 22:59:36 2025 by rpki-client