Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS202340.roa
File:                     AS202340.roa (raw, json)
Hash identifier:          OJ7uo0BwcOUIXWe9Kt27lNPebM3TW+jY/xnAVqoCl5A=
Subject key identifier:   71:2E:DA:47:2B:0C:96:C5:6A:39:02:4E:8E:0B:21:E4:61:67:1E:F5
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       174D5856279900375CAF2A65C8B3C96C8C4BB7A2
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS202340.roa
Signing time:             Mon 28 Nov 2022 12:30:53 +0000
ROA not before:           Mon 28 Nov 2022 12:25:53 +0000
ROA not after:            Mon 27 Nov 2023 12:30:53 +0000
asID:                     202340
IP address blocks:        2a12:dd47:8162::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4d:58:56:27:99:00:37:5c:af:2a:65:c8:b3:c9:6c:8c:4b:b7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:53 2022 GMT
            Not After : Nov 27 12:30:53 2023 GMT
        Subject: CN=712EDA472B0C96C56A39024E8E0B21E461671EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:bf:f8:76:c3:8d:01:90:87:cc:68:35:c5:
                    9c:3a:86:5a:3b:bb:f9:92:a0:0b:1f:d4:d9:35:d3:
                    0d:8a:3d:0c:ed:12:68:64:80:6a:d8:84:ff:8c:4e:
                    d3:12:df:c6:b0:b0:72:24:a9:87:f9:c8:8b:02:b9:
                    ca:c2:8a:44:c2:d0:d6:87:58:6d:a9:53:cf:e0:7e:
                    e6:98:28:5a:05:ae:5a:5b:b3:e8:23:57:9d:46:5a:
                    7b:7a:39:c3:be:bb:64:82:a6:f4:c2:ca:68:3b:1d:
                    cc:2b:66:65:fb:fb:c5:25:7d:8d:18:1a:98:a6:63:
                    ec:1e:fe:77:34:76:08:b3:84:02:bd:7e:25:72:79:
                    16:e4:c5:ee:5b:6e:fa:6d:f5:ea:22:cc:d1:cf:4b:
                    75:60:0a:9b:1d:5e:e0:07:0a:1f:74:29:22:9c:0a:
                    77:12:b4:d5:18:09:71:d5:66:37:0d:11:51:91:c3:
                    5f:1f:a5:0b:49:96:c9:e3:98:9f:27:f8:ad:3b:41:
                    d4:d4:bd:1b:cc:f3:8d:49:f9:5b:bc:2f:b1:06:0b:
                    7f:98:4f:bf:3b:d5:fa:4f:eb:e9:e5:95:4f:1d:75:
                    71:ba:f7:69:57:f1:6a:ee:a5:50:2b:eb:81:37:cd:
                    a2:5e:cb:ff:5c:d1:cc:ef:39:a1:19:18:ff:df:ba:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2E:DA:47:2B:0C:96:C5:6A:39:02:4E:8E:0B:21:E4:61:67:1E:F5
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS202340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8162::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:70:a4:f5:b6:f2:7f:a1:5f:f0:6c:d2:bb:91:f8:22:19:d9:
         8d:39:0b:47:3e:a5:9e:17:7c:68:85:a0:cf:07:c1:d9:32:05:
         92:e5:01:83:09:7b:47:31:54:e2:35:a9:4b:88:61:8c:70:d5:
         f4:6b:71:c6:36:9a:83:70:94:08:5e:2e:04:6e:9d:12:3a:13:
         8c:b9:1f:25:09:a0:89:e9:e3:91:51:9d:00:70:0e:dd:01:6a:
         e2:6f:b0:a0:94:42:39:9b:0d:f3:96:16:47:dd:53:14:33:9d:
         da:f0:1e:26:5d:ec:18:f7:3a:90:28:30:a7:78:d7:15:58:13:
         dc:6a:d3:35:32:50:13:8f:ef:de:b0:21:10:71:07:e6:8a:bb:
         e0:dc:67:0f:5d:aa:2f:7d:6f:42:34:1f:3e:9d:f9:93:12:9b:
         1d:2f:a5:28:80:b1:23:f0:f7:8c:23:1c:3b:be:f8:9c:17:71:
         d0:17:e6:71:00:b1:d1:06:f5:c9:fc:de:14:ee:ae:89:bf:ce:
         ff:33:1f:6c:14:5a:68:4a:14:a1:ac:55:1a:ff:12:cf:3a:92:
         d3:95:05:ef:aa:4b:99:cf:fd:c0:ed:c3:a4:73:f2:29:2b:fb:
         41:fe:08:22:e1:41:ec:4f:19:73:e9:17:09:a7:f7:43:5a:a1:
         cc:a6:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----