Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS203636.roa
File:                     AS203636.roa (raw, json)
Hash identifier:          WkL9y7EmYsC1gRIyoQNgz7NBLoUk8Wsrpxuy5pfBFoA=
Subject key identifier:   FA:04:C1:60:E2:C0:AE:C5:36:A0:6B:0B:9D:78:5B:E9:7D:B4:97:C4
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       1C09ABE3285D054FEB616138B1C9F316D1953BD2
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS203636.roa
Signing time:             Fri 24 Feb 2023 02:23:45 +0000
ROA not before:           Fri 24 Feb 2023 02:18:45 +0000
ROA not after:            Fri 23 Feb 2024 02:23:45 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:ab:e3:28:5d:05:4f:eb:61:61:38:b1:c9:f3:16:d1:95:3b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Feb 24 02:18:45 2023 GMT
            Not After : Feb 23 02:23:45 2024 GMT
        Subject: CN=FA04C160E2C0AEC536A06B0B9D785BE97DB497C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:8c:c3:f6:ee:72:04:27:cc:f6:c6:e6:d5:
                    6b:d1:31:a0:ff:77:1a:ce:b7:4e:f2:70:25:49:8e:
                    96:bb:8f:b5:01:46:3c:ff:12:48:e5:f8:51:ee:a2:
                    ce:92:6f:8c:51:8a:01:ae:10:e7:3d:4c:a7:b5:63:
                    b0:93:c9:e2:ae:da:5b:0d:1c:44:66:1b:cc:e2:8b:
                    01:2f:9e:bb:ee:1e:cc:d6:69:b0:a4:65:bc:dc:b5:
                    9a:ec:08:f9:89:a4:e4:eb:41:a3:39:ab:aa:ac:9e:
                    36:b2:a9:86:a3:28:2a:b5:df:f0:36:87:a0:63:62:
                    e7:a9:9c:ef:b8:4f:b1:c1:bb:c2:d1:24:56:7c:98:
                    81:bd:a8:d6:65:9b:a6:25:be:be:d7:96:ce:94:ad:
                    1d:13:df:7a:09:5c:3b:76:eb:2a:c3:57:74:09:40:
                    2a:56:20:7a:3a:fd:0d:7f:e9:05:60:de:e4:d7:05:
                    42:47:2e:09:17:ae:b3:7e:1e:b9:81:ba:a2:28:b9:
                    45:72:50:37:d6:df:7d:82:20:f0:20:63:4c:df:3a:
                    ac:d1:08:19:47:c3:8d:42:2e:c2:bf:51:8e:db:e5:
                    bc:97:e8:29:1a:df:09:3f:c2:4e:ee:3e:1e:96:22:
                    3b:fa:2b:0d:5f:15:4d:d6:e2:cf:97:62:5f:d6:c7:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:C1:60:E2:C0:AE:C5:36:A0:6B:0B:9D:78:5B:E9:7D:B4:97:C4
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS203636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:de:5f:65:31:ac:2c:14:d5:e0:8f:2b:b4:ed:9b:b0:99:ee:
         2f:ba:8d:e7:7b:ec:78:eb:18:5c:a4:2d:66:be:53:97:2c:43:
         df:07:f5:0e:61:af:57:89:d6:ce:87:d8:a6:0c:9f:11:65:5f:
         ea:ce:50:b6:a9:a1:1c:14:0c:7a:ca:1d:1d:f1:69:08:3e:be:
         6d:fc:51:64:68:ca:60:c5:f8:92:a0:e0:c1:5c:da:d7:6d:e6:
         d2:0f:c8:1d:93:74:41:a1:3c:4e:11:99:41:61:c0:43:21:e5:
         67:e3:21:db:fb:84:0c:6f:47:e8:3f:5c:de:56:cf:e6:2e:cd:
         58:32:e3:5a:13:d3:d1:96:cc:b1:ff:39:4f:b8:45:e8:e4:33:
         28:db:4b:3e:cc:8f:94:cd:d4:17:a2:c6:af:59:67:76:ed:db:
         f0:7d:6d:8a:44:07:9d:54:f8:93:57:82:e0:f5:dd:f7:2d:60:
         a1:f3:a7:78:72:ee:ec:74:b3:76:ac:88:4c:05:56:10:f2:1e:
         67:59:18:21:62:42:61:03:95:00:fc:c8:e3:5b:98:ed:ab:96:
         b6:2b:ae:64:5f:39:8b:eb:78:18:ec:b6:29:59:7e:6c:84:81:
         db:e0:ac:0b:5e:9c:c3:a4:8a:2c:63:3d:9e:1c:1f:06:8e:31:
         4a:fd:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----