Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS210810.roa
File:                     AS210810.roa (raw, json)
Hash identifier:          XLZiqA9+okyhnYbs5mNjf0ciumhuNorqieNmSilD0/o=
Subject key identifier:   34:53:CD:8A:A2:0E:04:06:95:C7:32:14:71:A2:D4:4A:8F:E3:8C:B1
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       4EEF568A65ECDE354419D5CA0FBB2077A3A46AD0
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS210810.roa
Signing time:             Mon 28 Nov 2022 12:30:46 +0000
ROA not before:           Mon 28 Nov 2022 12:25:46 +0000
ROA not after:            Mon 27 Nov 2023 12:30:46 +0000
asID:                     210810
IP address blocks:        2a12:dd47:9330::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:56:8a:65:ec:de:35:44:19:d5:ca:0f:bb:20:77:a3:a4:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:46 2022 GMT
            Not After : Nov 27 12:30:46 2023 GMT
        Subject: CN=3453CD8AA20E040695C7321471A2D44A8FE38CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:3b:a2:f6:7d:4a:b5:a7:02:81:13:c8:76:
                    a8:9c:3d:26:37:bf:44:58:04:df:31:be:ae:40:92:
                    f7:ea:e8:dc:27:d4:79:aa:73:58:fd:dc:db:bd:ea:
                    7e:de:82:f9:d9:8b:53:0d:06:ce:57:89:ea:c7:eb:
                    ed:08:01:cd:2b:80:b7:8c:2f:5d:40:77:e0:36:d8:
                    05:1a:61:c6:d5:90:3f:9d:f9:73:15:4e:07:7c:98:
                    8d:97:45:2a:9d:3b:8f:fc:28:6f:64:f1:23:73:f9:
                    b7:6d:f9:8e:54:a4:39:70:e6:9e:89:ee:64:d1:0a:
                    3b:f5:67:2f:f2:e5:aa:46:7f:d5:a6:54:c5:9b:d1:
                    51:c1:05:12:f5:9a:9a:d4:99:38:bb:f8:50:56:36:
                    2c:00:fd:57:91:ae:9a:9d:4b:a1:54:cb:a4:e4:de:
                    cd:d3:d2:01:88:9a:0f:d8:7d:e8:be:e1:06:54:ea:
                    f6:c5:3b:d8:f4:a3:81:b6:46:f6:fd:9e:aa:ae:5c:
                    bc:12:4b:f8:44:8a:2e:96:19:77:93:ff:15:02:dc:
                    c8:d9:85:6e:84:5f:92:92:2a:0e:71:c8:9b:13:3b:
                    76:ca:56:50:82:58:5d:83:3e:08:a7:d6:27:7b:00:
                    43:51:db:44:01:60:7e:4e:f0:63:e8:97:b6:e1:93:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:53:CD:8A:A2:0E:04:06:95:C7:32:14:71:A2:D4:4A:8F:E3:8C:B1
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS210810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9330::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:99:f0:9f:fe:b2:c3:b8:ca:ac:c4:cd:40:f6:6c:eb:0b:
         46:19:8a:da:ce:00:54:8e:ff:86:ba:03:17:65:e5:82:d7:be:
         ff:6b:d0:eb:92:08:00:7f:55:c9:76:99:ce:d1:65:19:ac:78:
         54:31:21:df:5a:81:4e:4b:20:ee:cf:38:36:5a:f8:24:be:df:
         49:27:2b:45:b0:89:82:b6:78:44:91:8a:bf:56:27:4d:39:d9:
         fa:46:f5:c4:38:61:14:b0:ac:6d:99:22:b2:d4:d6:2d:89:f5:
         86:bb:00:ef:b5:51:10:26:54:03:68:97:33:0a:fc:7a:2a:99:
         51:3f:b4:d3:ae:e8:62:a9:40:a2:10:cb:74:1c:30:b4:06:9d:
         97:c3:86:f2:dc:93:db:0f:e9:fa:1d:c7:1d:fa:9c:c7:fa:2c:
         ea:b8:62:38:13:cb:04:1c:bd:f1:65:c3:0a:e0:dc:53:1b:b0:
         74:d9:56:61:6a:08:fa:35:37:01:53:53:e8:d5:39:ab:8b:85:
         f0:bd:31:11:92:f3:fe:4a:3d:f2:7c:72:86:c5:57:ac:e1:81:
         fd:37:00:00:1e:ee:93:13:45:97:c0:0c:81:1d:b5:7f:55:3d:
         e7:e9:be:9e:72:e6:e5:4f:d5:9f:9a:08:d7:b4:8b:3b:f1:63:
         3d:a5:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----