$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft File: HpTC6b92VEpaAMOici0QgCJOwA4.mft (raw, json) Hash identifier: 5qss07adAFsThIY9ZhQPHw4GhoWDFMrZQ0/9GoXk1Sk= Subject key identifier: BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC Authority key identifier: 1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E Certificate issuer: /CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E Certificate serial: 10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft Manifest number: 10 Signing time: Wed 20 Aug 2025 20:12:12 +0000 Manifest this update: Wed 20 Aug 2025 20:12:12 +0000 Manifest next update: Thu 21 Aug 2025 02:12:12 +0000 Files and hashes: 1: HpTC6b92VEpaAMOici0QgCJOwA4.crl (hash: q0O42brN7QmRe5RmZjSDxGMbL0Dlei4LwgRuPsWTx54=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Aug 2025 02:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E Validity Not Before: Aug 20 20:12:12 2025 GMT Not After : May 29 15:30:24 2026 GMT Subject: CN=BEED3C841F9D8994442239C237DE55EADB5FDBEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:18:37:f4:2f:66:58:8d:30:6b:37:13:7c: b6:4e:01:75:a9:ac:b7:94:02:c5:bf:81:56:33:28: b8:89:5b:a7:e6:e4:78:71:3d:57:43:ec:db:8a:44: 76:05:67:41:4d:ec:00:7b:8e:29:28:ce:bf:2a:9c: ba:62:50:ab:c2:13:00:8e:bd:0c:b0:d8:64:1e:eb: bb:a5:54:59:8a:56:62:e3:4b:43:44:af:1d:3b:da: 8c:8e:76:07:99:ff:9f:5b:49:50:b7:d4:88:a6:3f: 86:cc:13:ec:da:ec:09:f0:ae:e1:59:1c:e8:b0:d1: 57:bc:dd:26:03:03:ef:f8:ec:a4:53:34:4d:05:54: 32:fa:61:57:b3:6a:7f:2f:72:fc:fc:aa:dc:d2:9f: c0:45:53:8c:c4:45:6c:8e:52:67:a2:20:12:46:18: 80:8a:1a:79:22:b6:5d:11:b2:80:5a:e9:9a:ab:79: 01:c2:a9:51:8b:38:3a:d6:00:2b:3c:5e:d6:7a:6e: c8:0a:64:d8:ee:8a:87:a3:06:d5:2e:77:44:a6:e3: 26:36:b3:2c:60:26:75:76:c4:e1:7d:a2:20:cd:1f: a2:f2:da:ce:aa:2c:77:84:61:2f:d1:18:f6:d2:b9: be:99:da:0a:ab:6c:ff:cc:b0:5e:5d:34:63:e1:f3: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC X509v3 Authority Key Identifier: keyid:1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:11:d1:4c:d6:ec:1f:af:21:a8:e8:2b:53:7b:69:f5:9a: 05:75:03:27:b2:18:a8:4b:60:34:bc:d4:0f:25:57:17:1e:70: e4:52:fe:b0:98:1e:55:de:7d:cc:ec:0f:64:4f:a3:23:57:f0: 16:17:2d:51:c2:f3:04:6f:54:e8:11:fe:c2:bb:d9:c2:ea:1a: b2:de:72:d4:fc:90:83:ff:cc:e4:0d:e7:e5:a5:fc:2f:91:f8: 8c:58:c6:11:a7:66:46:7f:6c:d6:fd:d8:03:6b:2c:55:45:70: 97:f6:81:4e:c4:8c:2b:96:4b:41:70:02:f6:a3:f2:af:11:f4: a9:9c:b1:01:dc:6f:87:4c:80:4d:d9:ba:99:25:1e:26:09:fa: f0:0e:97:dd:f0:00:a3:a0:c1:e8:fb:b0:d8:84:52:21:ca:99: 6b:d7:62:35:02:ae:f6:f0:4b:da:c3:08:df:5a:78:79:71:16: 5b:cc:0c:4c:08:c6:59:4a:07:de:8d:ad:74:83:8c:15:38:8c: ca:c6:6b:91:9b:d5:a7:c0:eb:0a:52:fc:a4:ac:88:e5:bf:1c: db:2d:6d:b0:41:68:e7:34:fe:b3:23:30:9b:ce:e6:a5:23:88: 72:26:bb:7a:f3:f3:7d:f6:8a:ea:58:ed:43:dc:33:f2:80:82: b5:47:23:94 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRTk0 QzJFOUJGNzY1NDRBNUEwMEMzQTI3MjJEMTA4MDIyNEVDMDBFMB4XDTI1MDgyMDIw MTIxMloXDTI2MDUyOTE1MzAyNFowMzExMC8GA1UEAxMoQkVFRDNDODQxRjlEODk5 NDQ0MjIzOUMyMzdERTU1RUFEQjVGREJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMglGDf0L2ZYjTBrNxN8tk4Bdamst5QCxb+BVjMouIlbp+bkeHE9 V0Ps24pEdgVnQU3sAHuOKSjOvyqcumJQq8ITAI69DLDYZB7ru6VUWYpWYuNLQ0Sv HTvajI52B5n/n1tJULfUiKY/hswT7NrsCfCu4Vkc6LDRV7zdJgMD7/jspFM0TQVU MvphV7Nqfy9y/Pyq3NKfwEVTjMRFbI5SZ6IgEkYYgIoaeSK2XRGygFrpmqt5AcKp UYs4OtYAKzxe1npuyApk2O6Kh6MG1S53RKbjJjazLGAmdXbE4X2iIM0fovLazqos d4RhL9EY9tK5vpnaCqts/8ywXl00Y+HzPqcCAwEAAaOCAg0wggIJMB0GA1UdDgQW BBS+7TyEH52JlEQiOcI33lXq21/b7DAfBgNVHSMEGDAWgBQelMLpv3ZUSloAw6Jy LRCAIk7ADjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EQlNCQU5L VFcvSHBUQzZiOTJWRXBhQU1PaWNpMFFnQ0pPd0E0LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9IcFRDNmI5MlZFcGFBTU9pY2kwUWdDSk93QTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EQlNCQU5LVFcvSHBUQzZiOTJWRXBh QU1PaWNpMFFnQ0pPd0E0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIzbEdFM1uwfryGo6CtTe2n1mgV1AyeyGKhLYDS81A8lVxcecORS/rCYHlXe fczsD2RPoyNX8BYXLVHC8wRvVOgR/sK72cLqGrLectT8kIP/zOQN5+Wl/C+R+IxY xhGnZkZ/bNb92ANrLFVFcJf2gU7EjCuWS0FwAvaj8q8R9KmcsQHcb4dMgE3Zupkl HiYJ+vAOl93wAKOgwej7sNiEUiHKmWvXYjUCrvbwS9rDCN9aeHlxFlvMDEwIxllK B96NrXSDjBU4jMrGa5Gb1afA6wpS/KSsiOW/HNstbbBBaOc0/rMjMJvO5qUjiHIm u3rz8332iupY7UPcM/KAgrVHI5Q= -----END CERTIFICATE-----Generated at Wed Aug 20 23:44:31 2025 by rpki-client