ASUS does sign stuff. The problem here is that they won't revoke the compromised certificates...