Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
File:                     3130342e33372e34322e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          GbXE3Nt4VHL6Vpsh5E0QbcoiKmQUgG3N8Q5XjJlmJ/8=
Subject key identifier:   5C:63:CF:1E:53:59:79:6A:7E:13:38:52:A6:B9:7E:D1:1F:56:04:95
Certificate issuer:       /CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
Certificate serial:       5616D2B13A8D2CCBFE6DCA3311083C39E5D1DC81
Authority key identifier: 8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
Signing time:             Mon 28 Nov 2022 12:30:44 +0000
ROA not before:           Mon 28 Nov 2022 12:25:44 +0000
ROA not after:            Mon 27 Nov 2023 12:30:44 +0000
asID:                     50058
IP address blocks:        104.37.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:16:d2:b1:3a:8d:2c:cb:fe:6d:ca:33:11:08:3c:39:e5:d1:dc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
        Validity
            Not Before: Nov 28 12:25:44 2022 GMT
            Not After : Nov 27 12:30:44 2023 GMT
        Subject: CN=5C63CF1E5359796A7E133852A6B97ED11F560495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:9d:78:f2:42:10:21:ad:a4:ed:aa:00:e9:
                    ca:07:d6:11:da:fa:a3:33:06:a7:ab:e3:42:40:5f:
                    19:3e:18:b2:b3:2b:91:26:9b:e2:13:b2:b6:46:ae:
                    dc:c3:3d:a8:21:52:56:ec:92:1e:58:d0:45:f3:7c:
                    29:6e:79:bf:6e:3e:07:45:84:aa:0c:96:30:84:ab:
                    04:70:86:32:4c:9b:ca:25:fb:40:64:e2:45:5b:e9:
                    72:51:e3:b5:9e:bb:42:63:af:6b:ff:c8:93:7b:9c:
                    23:e4:30:be:23:d2:e5:ca:cb:bd:0d:47:f6:39:3e:
                    b5:59:83:7a:a2:cd:8e:3c:7e:46:50:63:4d:7a:cf:
                    b6:88:f6:8c:c1:50:45:0b:73:1c:4b:23:a6:c0:f1:
                    55:40:61:ca:74:df:ec:7e:29:6b:8f:5f:33:63:bf:
                    be:05:59:51:39:61:1f:b0:c3:95:6e:66:28:d8:ad:
                    f3:a1:f2:6c:b4:ce:36:6d:5f:61:9d:fd:58:d5:d4:
                    5a:f2:04:16:0c:c3:f7:41:d6:7a:9d:d4:a4:89:83:
                    ae:43:54:29:89:7b:c1:33:a8:bd:1c:8f:4b:55:be:
                    32:eb:70:04:71:8e:34:6c:82:92:f5:7d:b2:38:b0:
                    a8:5d:1d:ae:17:cc:0b:ff:34:c0:c8:24:c8:e5:2c:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:CF:1E:53:59:79:6A:7E:13:38:52:A6:B9:7E:D1:1F:56:04:95
            X509v3 Authority Key Identifier:
                keyid:8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/11/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:52:33:76:b0:d8:c3:80:92:a5:e0:99:b4:da:65:26:8e:08:
         d6:b9:47:4e:44:1b:bd:be:b0:48:b9:fc:5a:64:ea:a1:e6:8a:
         71:32:55:42:cb:81:b4:b1:c8:5a:f0:28:52:f7:81:1e:c2:d4:
         a6:9f:39:b7:1f:68:4d:a9:f5:8f:48:1b:0e:35:4a:23:0e:1b:
         c1:df:65:b4:50:aa:a3:46:4e:93:07:a3:6c:3d:f7:0e:0e:e3:
         9c:96:9d:1e:f5:89:25:0b:5f:77:eb:78:52:bb:ba:96:96:12:
         30:c0:4e:0e:88:62:28:eb:4b:85:3f:fd:e8:ae:77:87:99:c5:
         56:86:a2:a5:ed:96:43:3b:30:0b:2d:6f:28:9d:f7:a7:47:cb:
         af:fe:2e:82:62:d7:37:dd:db:5f:a9:36:13:18:30:7b:ad:2c:
         26:74:70:9b:ae:b5:87:b5:20:d3:ce:a6:47:72:d6:bb:34:31:
         90:15:da:b8:bc:c1:b0:06:31:d7:a1:c0:33:1b:c0:e9:ab:1e:
         f9:09:9c:4d:6e:58:6a:93:05:9c:bd:04:6b:b4:ed:a4:10:89:
         6e:c9:fe:89:ee:6c:a3:ad:7f:48:cd:33:7b:4f:05:c4:7f:67:
         49:b8:0a:d7:e5:b4:61:a7:85:11:38:cb:d6:c9:c6:26:a4:bc:
         37:c6:92:cb
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIUVhbSsTqNLMv+bcozEQg8OeXR3IEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQyODc5QUMyNjU4OTE2QjlEQUFBRkE2MkNCRjdFMDVF
MkRGODY4MzAeFw0yMjExMjgxMjI1NDRaFw0yMzExMjcxMjMwNDRaMDMxMTAvBgNV
BAMTKDVDNjNDRjFFNTM1OTc5NkE3RTEzMzg1MkE2Qjk3RUQxMUY1NjA0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuZ148kIQIa2k7aoA6coH1hHa
+qMzBqer40JAXxk+GLKzK5Emm+ITsrZGrtzDPaghUlbskh5Y0EXzfClueb9uPgdF
hKoMljCEqwRwhjJMm8ol+0Bk4kVb6XJR47Weu0Jjr2v/yJN7nCPkML4j0uXKy70N
R/Y5PrVZg3qizY48fkZQY016z7aI9ozBUEULcxxLI6bA8VVAYcp03+x+KWuPXzNj
v74FWVE5YR+ww5VuZijYrfOh8my0zjZtX2Gd/VjV1FryBBYMw/dB1nqd1KSJg65D
VCmJe8EzqL0cj0tVvjLrcARxjjRsgpL1fbI4sKhdHa4XzAv/NMDIJMjlLIAdAgMB
AAGjggICMIIB/jAdBgNVHQ4EFgQUXGPPHlNZeWp+EzhSprl+0R9WBJUwHwYDVR0j
BBgwFoAUjSh5rCZYkWudqq+mLL9+BeLfhoMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9IWVNQLzEx
LzhEMjg3OUFDMjY1ODkxNkI5REFBQUZBNjJDQkY3RTA1RTJERjg2ODMuY3JsMIGT
BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjNiZDQ1NDc1
MmJlNi8wLzhEMjg3OUFDMjY1ODkxNkI5REFBQUZBNjJDQkY3RTA1RTJERjg2ODMu
Y2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9ycGtpLmF1
Z3VzdC50dy9yZXBvL0hZU1AvMTEvMzEzMDM0MmUzMzM3MmUzNDMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzMDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWglKjANBgkqhkiG
9w0BAQsFAAOCAQEAsFIzdrDYw4CSpeCZtNplJo4I1rlHTkQbvb6wSLn8WmTqoeaK
cTJVQsuBtLHIWvAoUveBHsLUpp85tx9oTan1j0gbDjVKIw4bwd9ltFCqo0ZOkwej
bD33Dg7jnJadHvWJJQtfd+t4Uru6lpYSMMBODohiKOtLhT/96K53h5nFVoaipe2W
QzswCy1vKJ33p0fLr/4ugmLXN93bX6k2Exgwe60sJnRwm661h7Ug086mR3LWuzQx
kBXauLzBsAYx16HAMxvA6ase+QmcTW5YapMFnL0Ea7TtpBCJbsn+ie5so61/SM0z
e08FxH9nSbgK1+W0YaeFETjL1snGJqS8N8aSyw==
-----END CERTIFICATE-----