A signature verification method in a signature verification device including a storage that stores a first server certificate including a first public key, the method comprising:
- a step of receiving a second server certificate including a second public key and receiving signature data which is generated by encrypting a hash value derived from the second server certificate using a secret key forming a key pair with the first public key;
- a step of decrypting the signature data by using the first public key to acquire a first hash value;
- a step of deriving a second hash value from the second server certificate;
- and
- a step of determining a signature generation device generating the signature data to be correct in a case of the first hash value and the second hash value matching.