Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS201421.roa
File:                     AS201421.roa (raw, json)
Hash identifier:          CxajSz3LkxIk0xrrckHf43PXdZQ7SU5BLQ9TuUkpTks=
Subject key identifier:   83:5E:89:C4:41:D9:D4:03:0C:45:CD:8F:76:86:B2:36:13:3C:B5:A6
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       07B664BF08A71750B0E145DFCACEC340D13DFDC9
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS201421.roa
Signing time:             Mon 28 Nov 2022 12:31:02 +0000
ROA not before:           Mon 28 Nov 2022 12:26:02 +0000
ROA not after:            Mon 27 Nov 2023 12:31:02 +0000
asID:                     201421
IP address blocks:        2a12:dd47:8331::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b6:64:bf:08:a7:17:50:b0:e1:45:df:ca:ce:c3:40:d1:3d:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:26:02 2022 GMT
            Not After : Nov 27 12:31:02 2023 GMT
        Subject: CN=835E89C441D9D4030C45CD8F7686B236133CB5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:0f:60:2e:fe:8b:8e:e9:59:65:d8:b9:f9:
                    0c:a7:39:6b:22:3f:3e:5c:5f:14:b0:4b:b4:f0:07:
                    80:89:6b:20:11:11:ff:f2:d2:f5:23:f6:78:6f:c5:
                    00:48:e8:84:e5:04:f5:3f:1f:47:e4:b0:00:c2:51:
                    6e:8a:bf:9a:91:7d:9c:05:66:04:83:ac:be:c7:06:
                    d6:d3:57:20:71:a1:3a:7e:87:8f:41:4d:48:7f:b5:
                    bb:78:d1:15:8d:6c:e3:52:61:c2:e4:41:68:fd:ab:
                    0a:48:a5:57:dc:ac:31:df:06:53:c0:f6:ff:d4:00:
                    ce:f8:ca:ad:36:46:55:21:92:ce:cc:17:9b:89:0f:
                    78:d6:f2:99:60:7e:b8:ce:1a:c6:51:ac:5a:57:04:
                    ce:a2:81:e8:bf:55:e3:26:b3:e3:b1:ca:d1:cf:f1:
                    7b:ff:6e:e5:03:5a:de:db:37:23:d0:d5:eb:11:f6:
                    8e:86:ce:93:18:d8:a3:56:fe:54:2a:2e:4f:d1:d7:
                    fd:3c:ff:cb:0c:ef:2f:2b:8d:83:28:18:f6:b0:81:
                    aa:77:12:2a:a4:ab:5b:87:82:1b:c5:10:5c:21:de:
                    db:2a:b3:57:7d:af:75:c2:4e:c8:05:f5:37:a5:aa:
                    40:0c:4d:9e:5d:38:14:02:a8:13:aa:f7:29:54:0c:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:89:C4:41:D9:D4:03:0C:45:CD:8F:76:86:B2:36:13:3C:B5:A6
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS201421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8331::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:26:b1:e9:e2:86:ef:a9:2d:bf:a5:5e:b5:3e:6b:40:da:a1:
         fc:35:dd:be:a9:33:c8:94:0f:59:10:90:3c:8b:82:72:b9:08:
         1a:3f:d2:83:8e:95:3e:3c:65:93:7f:a2:2f:6b:ae:37:4c:76:
         c0:9a:2c:0a:50:6d:fb:56:a4:c0:d1:47:b9:f5:f9:8d:95:40:
         61:5f:cf:9b:66:fe:0b:4a:be:85:d0:24:68:e2:0d:b1:eb:c5:
         e5:a1:91:43:91:53:d0:de:05:9f:39:3f:b7:4e:49:f7:89:ef:
         00:70:93:49:e3:f6:d7:d1:f5:67:2e:05:96:db:df:5f:d0:6a:
         a9:e3:b4:5c:c2:d7:3d:87:8b:94:bb:0e:6a:f6:47:56:bc:9f:
         38:73:8e:21:d1:5c:1b:3f:2c:1a:ca:c9:ec:35:f2:e8:e7:3b:
         ba:51:b9:b6:2e:a8:4f:43:57:ec:ad:3d:68:e4:ab:6c:8e:07:
         71:51:03:7b:07:9e:10:21:36:33:2a:e4:c2:68:e8:88:9f:39:
         5b:26:6e:1f:c4:a5:6f:88:d7:53:0e:42:9b:a0:66:db:fc:eb:
         97:9e:87:cf:89:86:62:bd:b9:17:48:f1:68:14:2f:9b:83:4e:
         6d:2c:63:83:86:d3:7e:44:3b:1b:19:7e:87:eb:38:9b:fc:f0:
         2f:b1:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----