Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/11/3130342e33372e34332e302f32342d3234203d3e20393435.roa
File:                     3130342e33372e34332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          13Ra59TCHTZo+tcHno/R+w7Yv6rFW2NGVSwCGoOYDbM=
Subject key identifier:   9D:BF:30:57:25:58:95:9D:C9:E7:03:86:7F:F9:12:EF:06:08:C3:39
Certificate issuer:       /CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
Certificate serial:       4E6DBB85C750696999D08F5C97DD30683F246728
Authority key identifier: 8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/11/3130342e33372e34332e302f32342d3234203d3e20393435.roa
Signing time:             Wed 22 Feb 2023 02:40:16 +0000
ROA not before:           Wed 22 Feb 2023 02:35:16 +0000
ROA not after:            Wed 21 Feb 2024 02:40:16 +0000
asID:                     945
IP address blocks:        104.37.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6d:bb:85:c7:50:69:69:99:d0:8f:5c:97:dd:30:68:3f:24:67:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
        Validity
            Not Before: Feb 22 02:35:16 2023 GMT
            Not After : Feb 21 02:40:16 2024 GMT
        Subject: CN=9DBF30572558959DC9E703867FF912EF0608C339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:3c:66:85:68:f6:f1:e0:43:cb:a3:39:99:
                    74:16:61:7a:cf:bd:71:c0:36:85:b9:af:47:cc:de:
                    55:6c:7f:55:fd:7e:7e:b8:ee:d9:05:cd:1b:b9:7c:
                    5c:ae:a8:47:e4:97:e4:23:84:4b:22:d9:f2:70:b9:
                    fa:c2:2b:26:66:93:be:ab:63:33:7f:ee:74:42:cc:
                    5d:60:63:58:31:c9:e2:ea:3c:24:e7:07:a2:38:3c:
                    96:77:f5:3d:d7:01:9c:e8:68:d5:ae:da:fc:64:17:
                    4d:b0:e3:71:40:4f:e2:6a:e1:79:a9:4f:70:c4:2f:
                    68:5b:c7:60:b4:a8:1b:05:0b:cf:d3:4d:3d:fb:70:
                    0b:69:b4:f9:37:c1:8c:e1:bb:97:b6:72:73:cd:de:
                    84:e7:49:7a:2a:f3:de:0d:5a:2a:0e:67:d9:49:9d:
                    ab:5d:b6:5c:e3:b9:02:4a:cb:fc:28:32:a5:69:f6:
                    88:d9:f5:18:8f:32:cf:cf:90:f3:c1:9d:de:8a:33:
                    d1:3a:66:6b:19:eb:67:31:ea:78:e3:86:21:7c:7c:
                    3f:91:91:6f:40:1f:e9:ac:66:25:84:2c:30:e5:cb:
                    b8:ff:f8:8f:c1:a0:ae:5f:d3:66:69:d1:b7:c3:0c:
                    88:77:34:ea:d7:54:ce:80:f6:91:4f:40:78:87:26:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:30:57:25:58:95:9D:C9:E7:03:86:7F:F9:12:EF:06:08:C3:39
            X509v3 Authority Key Identifier:
                keyid:8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/11/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/11/3130342e33372e34332e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:3f:b4:7b:a1:e6:26:c5:21:4a:ae:a7:09:b2:ac:49:a6:07:
         ce:a9:2d:ef:88:d1:3c:a5:79:9a:32:e3:6f:5c:91:85:9c:03:
         e8:be:dd:c8:ec:f8:af:d6:b2:21:14:a8:fe:e5:db:87:40:56:
         17:eb:77:a6:43:9d:46:29:6e:04:e4:bc:a8:fa:bc:46:b6:7f:
         0d:57:43:cb:62:55:63:f6:92:e0:00:11:72:39:1f:e0:4e:47:
         01:64:97:02:82:53:c8:f6:37:0f:30:07:51:80:ce:85:0e:ce:
         a3:79:46:1c:17:64:c5:2a:b3:a2:51:d7:99:96:a8:41:f3:f3:
         d0:30:bf:4d:77:6a:c3:bb:b8:74:60:7d:d7:78:97:e5:3f:ac:
         99:44:af:a0:be:b3:19:93:97:5f:fd:48:f9:5e:14:25:9a:65:
         0d:d0:7a:06:eb:49:b6:3e:c5:ea:2d:ec:bc:93:27:eb:5b:4c:
         1c:c6:87:78:19:1b:f1:79:f8:af:86:13:1b:2a:45:0a:fc:bc:
         0e:13:fa:53:0b:b4:12:80:f7:bd:80:4a:f8:75:42:d0:77:a9:
         39:38:7a:3e:65:ba:93:3d:36:88:7f:66:c7:e1:99:68:da:40:
         b4:06:85:b6:86:23:e5:a3:f1:f4:64:36:d1:42:cd:2d:dd:0f:
         bd:e9:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----