Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/0/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          HJDxp2MmPb27N3RplNksbiX3bLMwkwPTOQmBbr6cF4M=
Subject key identifier:   9F:D6:AB:9F:B8:93:7A:F1:13:A5:FF:E6:08:3A:AD:C0:CE:08:5E:FB
Certificate issuer:       /CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
Certificate serial:       666D7AC65A99AE64B9A9E437D9E78D888D91308E
Authority key identifier: 18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/0/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 18 Mar 2023 01:06:50 +0000
ROA not before:           Sat 18 Mar 2023 01:01:50 +0000
ROA not after:            Sat 16 Mar 2024 01:06:50 +0000
asID:                     50058
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6d:7a:c6:5a:99:ae:64:b9:a9:e4:37:d9:e7:8d:88:8d:91:30:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
        Validity
            Not Before: Mar 18 01:01:50 2023 GMT
            Not After : Mar 16 01:06:50 2024 GMT
        Subject: CN=9FD6AB9FB8937AF113A5FFE6083AADC0CE085EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:4a:bc:0b:63:5b:ac:8f:9d:d2:28:d4:4f:
                    e6:5e:05:6c:b5:b2:71:d3:ab:fc:df:4a:80:81:8b:
                    e1:49:6c:e2:68:dd:79:c7:53:ba:2a:31:dd:0f:64:
                    e0:8c:0e:5b:c1:68:bd:4e:fa:99:82:3e:77:4a:61:
                    4d:a7:bd:1a:34:c9:e6:1b:08:e3:3d:0f:ec:63:2f:
                    64:22:ba:c7:00:b9:99:60:ce:5e:02:15:ed:7e:91:
                    8f:ee:d1:45:8d:d6:30:dc:25:9d:b3:ab:ef:d6:28:
                    97:e4:1d:7a:8f:61:1c:65:3d:3a:29:aa:72:c7:47:
                    0a:2a:8f:f7:3f:c4:56:15:57:2e:d5:f8:01:65:2e:
                    6f:7d:86:10:20:da:85:d6:ba:31:33:62:8c:bd:50:
                    e4:2e:a5:24:f0:ce:69:f0:49:5b:38:c4:98:1a:41:
                    16:0c:ad:c5:e8:af:0e:bf:67:42:57:3a:5a:ba:3b:
                    96:11:67:73:3c:af:c2:b1:b4:ae:9a:4e:d8:7b:b6:
                    7c:2c:80:84:5d:4a:be:23:58:13:04:e4:63:e4:58:
                    39:c3:d8:1b:f8:e7:f0:c3:ba:2f:7f:69:77:3a:d5:
                    19:21:77:81:8c:19:cc:e5:49:14:31:93:82:fd:62:
                    fe:8d:da:cb:7b:d8:15:9d:af:ab:9a:f9:22:14:fb:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D6:AB:9F:B8:93:7A:F1:13:A5:FF:E6:08:3A:AD:C0:CE:08:5E:FB
            X509v3 Authority Key Identifier:
                keyid:18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/0/18DAFE16771BDA7D2E6BD28AA70B9A40CE71D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/0/32332e3134392e3233322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:5e:69:64:b1:89:d0:6b:5c:16:23:7c:1d:10:2a:a3:c3:cf:
         b4:a1:00:e1:87:ba:9c:90:33:92:dc:e0:81:c1:a7:9e:69:46:
         d3:f5:ac:a6:4e:8b:4c:fc:16:b6:4b:07:8a:5e:56:44:71:19:
         04:47:fb:92:6d:ae:37:50:ae:59:be:77:bb:50:b4:21:9b:9a:
         89:32:ec:94:1e:35:b7:1e:1f:a1:8c:97:ba:e8:b2:5e:08:9a:
         65:23:92:dc:08:16:ba:e2:3d:12:7d:fb:67:08:b0:9f:43:e5:
         44:ed:5c:0c:bd:43:96:18:82:24:69:89:3b:4f:e9:8f:fd:2e:
         fe:f1:28:9a:d8:d1:23:53:14:f0:af:c9:4c:6c:d8:66:e5:b3:
         fc:ec:f3:ac:62:eb:d2:d8:3d:5c:b9:4c:60:9b:e5:18:0d:fc:
         71:b1:2d:35:78:e4:14:0b:3f:89:c6:6d:f3:23:35:78:63:92:
         29:fa:e4:13:2a:8f:b2:ac:45:81:b6:af:4d:df:79:be:08:5a:
         d1:14:2f:46:8f:b4:1f:8c:dd:66:1d:1a:e9:af:90:1c:eb:ce:
         dc:55:11:4f:53:b7:3d:e5:4c:e3:66:ce:ff:c0:be:6a:5e:1c:
         18:ea:a0:35:55:28:4c:e5:0c:8c:2b:3e:0b:ee:9e:c7:1b:30:
         41:36:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----