Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
File:                     GhwButO0roIMwWqNUMzJjAoMxjw.roa (raw, json)
Hash identifier:          h2sMbTgWaTW9RmRCAaTAYrlYZKz5+jp/3sX/+SNoB4U=
Subject key identifier:   1A:1C:01:BA:D3:B4:AE:82:0C:C1:6A:8D:50:CC:C9:8C:0A:0C:C6:3C
Certificate issuer:       /CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Certificate serial:       0E3B
Authority key identifier: E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
Signing time:             Tue 29 Sep 2020 10:03:48 +0000
ROA not before:           Tue 29 Sep 2020 10:03:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.130.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
        Validity
            Not Before: Sep 29 10:03:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1A1C01BAD3B4AE820CC16A8D50CCC98C0A0CC63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:ea:c1:51:ed:12:ea:6c:9e:91:b5:8f:bf:
                    8d:b3:6e:81:87:3d:04:36:0f:16:ef:07:d0:c4:55:
                    1a:08:36:bb:71:b9:8d:3d:ea:ce:3d:37:4c:cc:05:
                    c9:e6:81:6e:8f:e5:84:01:a1:5a:e0:e4:44:bd:89:
                    c5:0c:96:47:00:c7:06:14:36:59:49:f3:75:e4:ee:
                    4b:51:95:5d:42:ad:bd:b5:f2:b0:1d:dc:df:b6:c9:
                    18:de:1e:2e:47:10:c5:c0:72:4a:60:b6:4a:7f:55:
                    7a:6f:ea:62:58:2f:45:41:c7:2c:39:0b:be:a7:96:
                    8b:d0:80:0d:b6:8a:8d:cd:34:e4:2c:23:9f:01:f2:
                    0b:1d:56:13:15:5f:b9:07:a5:28:14:9e:04:ba:e4:
                    19:66:02:62:e8:5a:5f:aa:1b:89:e2:a1:33:97:bc:
                    22:c5:d6:88:bf:75:a2:ef:f6:4f:91:3a:b9:6f:10:
                    a4:e6:6f:d8:a5:93:de:eb:c5:05:31:41:35:b4:56:
                    ef:a4:99:b3:14:65:43:05:35:2e:c2:2a:95:81:74:
                    00:36:de:fa:73:9b:75:83:f8:72:38:cc:45:a8:03:
                    15:0d:c6:f4:29:62:50:86:0b:12:48:eb:68:d9:c6:
                    53:73:bf:c5:11:fe:71:47:1c:20:eb:87:9f:eb:af:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:01:BA:D3:B4:AE:82:0C:C1:6A:8D:50:CC:C9:8C:0A:0C:C6:3C
            X509v3 Authority Key Identifier:
                keyid:E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/5jxaFbfOkAMBCPStOOVB5s21vv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:2f:d8:90:f8:e0:62:b8:5b:ec:9e:0a:75:38:15:b8:da:
         bb:1f:e0:cf:b8:fe:fc:f0:89:08:ec:0c:60:e2:c6:60:98:48:
         62:32:55:20:a3:ea:45:5e:cb:7a:5c:fd:f6:1e:28:98:13:4b:
         82:32:69:be:cf:34:94:8e:9e:55:6f:ee:d0:40:d6:b2:ed:2c:
         d1:38:fe:32:c9:0c:f3:bf:82:03:cf:cf:8c:f4:20:82:93:c2:
         31:e5:e7:09:aa:35:cb:bf:b7:9c:f9:b0:8b:8e:a0:fe:b6:28:
         f1:20:cd:08:90:7c:59:5f:5e:51:fa:78:52:dd:87:05:eb:9b:
         53:a1:d0:ae:6d:60:5f:94:aa:4e:5b:4e:0d:e4:14:16:29:79:
         aa:c4:09:d5:a5:29:89:0e:16:54:52:5e:54:07:be:03:8e:20:
         65:6d:8b:76:d7:cd:3a:05:0d:af:e8:03:e2:eb:59:a4:a2:11:
         64:c7:3b:e8:25:01:4d:a4:af:a9:b1:70:0a:b1:37:d8:44:7b:
         35:1c:db:50:bf:36:5c:db:cf:31:08:c4:a4:22:8a:e8:67:71:
         ca:47:31:37:06:29:89:99:8f:20:63:5f:34:e2:37:4f:ab:d9:
         7c:29:1f:76:40:55:95:89:b2:b6:36:16:a2:70:db:de:52:d1:
         ee:99:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----