Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/17/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
File:                     3134392e3131322e35332e302f32342d3234203d3e203531383138.roa (raw, json)
Hash identifier:          NPXAPD9HO8e3LqaNwXjJk746IMLEGwpo1j9ql/gF/xM=
Subject key identifier:   E4:D2:B3:1A:1A:77:1F:D9:78:62:01:CE:DF:33:4E:15:3E:FC:91:48
Certificate issuer:       /CN=a3d7c4566a271cb77db6848a8e1765a42867e15d0751da2cdc
Certificate serial:       4C52941F17BD3A4F3B4B08464DF7FDC94A69B0DB
Authority key identifier: 53:2C:A4:03:D2:49:56:DC:50:E4:80:65:13:EF:77:96:98:25:23:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a271cb77db6848a8e1765a42867e15d0751da2cdc.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/17/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa
Signing time:             Sat 18 Mar 2023 00:07:56 +0000
ROA not before:           Sat 18 Mar 2023 00:02:56 +0000
ROA not after:            Sat 16 Mar 2024 00:07:56 +0000
asID:                     51818
IP address blocks:        149.112.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:52:94:1f:17:bd:3a:4f:3b:4b:08:46:4d:f7:fd:c9:4a:69:b0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566a271cb77db6848a8e1765a42867e15d0751da2cdc
        Validity
            Not Before: Mar 18 00:02:56 2023 GMT
            Not After : Mar 16 00:07:56 2024 GMT
        Subject: CN=E4D2B31A1A771FD9786201CEDF334E153EFC9148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:bf:40:fc:cd:7d:cb:4f:80:4c:5d:c6:65:
                    ae:cb:75:69:66:bc:19:de:3b:5c:37:55:e9:e4:17:
                    69:d0:80:08:ff:bb:45:17:bb:b8:34:b5:f9:de:38:
                    32:30:e2:66:b2:81:b1:96:7d:10:6b:03:80:47:4e:
                    18:45:55:69:35:b5:ef:da:28:82:8f:78:79:f6:d5:
                    79:e2:65:c7:77:7d:9d:87:57:91:95:50:3e:0b:f3:
                    ce:4b:42:b3:60:dc:a3:2b:87:2e:2d:0b:9b:2c:85:
                    61:7a:37:e0:ab:a6:63:fa:d1:1f:3c:e2:6f:80:4d:
                    d7:3d:6f:45:a4:39:0a:a3:97:22:c2:96:d5:c7:88:
                    12:c6:a6:66:bd:fe:36:fe:d1:b5:69:e3:e7:e2:51:
                    c1:16:86:a1:de:4d:17:42:c0:af:e3:bd:04:d6:d4:
                    fe:bd:17:67:3c:6e:0a:b2:5c:a2:d7:f4:71:af:03:
                    79:b7:a0:13:ea:87:4d:5d:55:bf:68:f0:af:82:b7:
                    40:fb:2c:95:d6:ba:09:3c:79:46:54:f6:a2:5a:c6:
                    ce:ed:fb:05:7e:44:9a:28:09:b3:8f:e8:63:64:12:
                    03:e3:c9:69:78:16:24:8a:74:99:46:ac:d6:5d:6a:
                    47:ca:16:7b:fb:3a:bf:63:3c:6e:33:8d:9a:dc:bf:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:B3:1A:1A:77:1F:D9:78:62:01:CE:DF:33:4E:15:3E:FC:91:48
            X509v3 Authority Key Identifier:
                keyid:53:2C:A4:03:D2:49:56:DC:50:E4:80:65:13:EF:77:96:98:25:23:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/17/532CA403D24956DC50E4806513EF7796982523F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a271cb77db6848a8e1765a42867e15d0751da2cdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/17/3134392e3131322e35332e302f32342d3234203d3e203531383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:98:ad:60:2c:53:50:4d:cd:4c:d9:89:4b:a6:30:03:b0:cc:
         ed:68:ce:59:f2:35:d6:20:e6:6b:80:db:db:8c:19:d3:d1:11:
         01:de:a0:db:67:5d:12:c4:9b:16:0d:9a:5d:c9:63:e7:b6:ca:
         c1:28:21:2a:fc:c3:14:fb:aa:0c:91:31:da:c6:03:ae:ce:02:
         3c:07:dd:ea:31:b9:fc:b7:b0:94:f6:34:4e:dc:62:82:b1:64:
         68:7b:72:7d:75:e3:89:ba:5d:9b:25:55:85:be:54:ba:88:1e:
         b8:43:4a:27:df:5b:23:94:4b:53:d9:e2:30:c7:81:bb:e0:23:
         68:7e:ac:e1:28:d0:e2:95:59:65:de:91:f8:6b:ff:31:9d:8b:
         61:1d:d1:b5:a5:b4:03:4a:37:cb:4a:2a:bf:bf:15:61:02:f0:
         fd:97:2a:f3:33:0a:2b:4d:02:8b:fd:da:a6:b5:56:a5:4a:49:
         29:22:ea:48:f7:51:ec:fd:0e:10:ea:e1:95:bb:37:b0:60:72:
         fd:71:26:8c:fa:f3:ff:39:b5:1d:a1:e2:3c:fd:c5:b4:07:e6:
         d4:0a:d6:6d:68:45:48:96:b6:68:30:bd:75:8a:81:08:97:49:
         4e:86:59:cc:7f:1d:ad:99:02:76:74:56:72:42:74:8c:02:28:
         f5:bc:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----