Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
File:                     32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier:          C64ILWexjSl7NHfgteoAJ6Qvt4UONKyAOWFqlkoJb5A=
Subject key identifier:   55:7A:C1:2C:3E:B3:FA:4B:BF:6C:B8:BB:3E:2B:6F:F8:45:11:45:49
Certificate issuer:       /CN=62f3d0af16175cfb00510efae2a32939deb33fd5fcc5b1df38
Certificate serial:       522DB1DEAFA8ECE6AA69DF5480B115E0BFCF95F7
Authority key identifier: 83:35:CA:21:B7:EE:37:0D:FE:A9:FC:15:56:4E:D0:63:BD:5D:6A:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16175cfb00510efae2a32939deb33fd5fcc5b1df38.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
Signing time:             Sat 18 Mar 2023 01:52:51 +0000
ROA not before:           Sat 18 Mar 2023 01:47:51 +0000
ROA not after:            Sat 16 Mar 2024 01:52:51 +0000
asID:                     212895
IP address blocks:        23.149.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:b1:de:af:a8:ec:e6:aa:69:df:54:80:b1:15:e0:bf:cf:95:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16175cfb00510efae2a32939deb33fd5fcc5b1df38
        Validity
            Not Before: Mar 18 01:47:51 2023 GMT
            Not After : Mar 16 01:52:51 2024 GMT
        Subject: CN=557AC12C3EB3FA4BBF6CB8BB3E2B6FF845114549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:2d:e1:c8:6c:ad:10:ff:01:c2:d7:b9:5f:
                    ea:93:83:bb:b3:43:e2:0d:ef:34:90:db:73:4c:22:
                    7e:20:db:39:88:51:98:4e:f6:54:4f:d1:55:29:57:
                    49:91:82:5d:a0:99:2d:c1:e5:d5:d4:8f:c8:e9:d8:
                    ef:c9:46:c1:4a:1b:44:f9:df:f2:11:50:04:53:d1:
                    39:37:7e:52:4c:bc:61:db:35:c6:57:d5:66:bb:31:
                    85:d4:3e:37:e0:ff:5f:12:5f:10:42:d2:b5:61:80:
                    37:61:2f:18:41:5d:54:67:1b:d6:a9:f2:98:f4:c1:
                    16:00:3b:ea:18:b3:f8:9d:b4:2f:ae:f1:3c:9b:6e:
                    de:e6:99:55:83:f1:a5:d9:9d:8e:41:b1:96:2d:67:
                    ac:e7:ef:1f:dc:fc:94:84:41:e8:f7:b3:4d:b2:90:
                    bd:2e:25:75:bc:52:ed:3f:91:f6:68:a2:8f:36:ea:
                    2b:3d:8d:be:f9:ad:64:5c:74:a4:64:79:4a:f8:b4:
                    01:4f:87:0a:ad:89:c5:b5:9f:03:8e:36:74:49:7e:
                    bd:c2:c2:d2:4f:b0:db:98:ae:e8:c4:18:06:d1:bc:
                    c1:48:12:7e:85:4c:b1:ef:99:fa:7a:07:b3:95:c9:
                    73:6a:9c:cd:96:20:2f:6d:39:0c:8f:ce:b3:d6:61:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7A:C1:2C:3E:B3:FA:4B:BF:6C:B8:BB:3E:2B:6F:F8:45:11:45:49
            X509v3 Authority Key Identifier:
                keyid:83:35:CA:21:B7:EE:37:0D:FE:A9:FC:15:56:4E:D0:63:BD:5D:6A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/13/8335CA21B7EE370DFEA9FC15564ED063BD5D6A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16175cfb00510efae2a32939deb33fd5fcc5b1df38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:95:d6:e2:29:96:7e:83:2f:9b:6a:b8:b6:7f:cb:e9:d7:51:
         93:58:a4:3b:e4:ad:d9:e4:db:e8:45:1f:20:73:2d:0a:f1:b6:
         2b:99:38:a4:20:79:4c:8f:66:c6:5d:98:4f:52:d9:23:22:a5:
         9f:5d:ca:55:81:e7:a3:f1:78:3a:d3:db:d8:6b:b9:28:6e:fe:
         d4:51:67:81:8f:11:34:d1:05:ef:c9:90:09:1f:d5:6f:13:f0:
         d4:20:2a:d7:72:60:b2:84:be:8c:a3:62:8d:ea:a6:6d:6d:f8:
         bb:b5:00:a8:29:03:8d:9d:0b:4e:33:8f:2d:44:5b:5e:ce:d3:
         8b:4e:3d:38:03:29:27:46:2c:a5:08:b1:6c:18:f5:14:6a:b7:
         6b:77:a7:66:5f:70:a2:2c:88:7b:4c:6a:46:70:12:f7:31:bb:
         af:38:55:6a:5e:0e:8e:28:3d:89:98:b1:39:af:00:2c:33:7a:
         ff:59:db:84:b2:c6:ed:79:45:e0:17:48:5f:71:e1:03:62:80:
         33:d5:64:f8:94:06:0d:49:6f:6c:3a:db:25:f1:92:88:56:d5:
         9a:a8:a1:44:9f:d2:79:9a:91:d9:bc:69:6e:0f:88:79:7c:f6:
         e2:6b:7c:7b:8b:19:71:c6:f9:05:a0:4c:6f:d0:80:c9:cb:c1:
         5e:30:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----