Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS211358.roa
File:                     AS211358.roa (raw, json)
Hash identifier:          jObTc9N+WDe5fP1Eyv/utrTj55UAHMdEFTiaSs0MGoo=
Subject key identifier:   BD:BD:3B:D6:E0:78:A6:76:73:55:04:12:EB:8B:90:0B:8A:AF:F3:7B
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       19BCB05CE8BD1D20B65BA1EAAB4A4E039FF5C685
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS211358.roa
Signing time:             Mon 28 Nov 2022 12:30:58 +0000
ROA not before:           Mon 28 Nov 2022 12:25:58 +0000
ROA not after:            Mon 27 Nov 2023 12:30:58 +0000
asID:                     211358
IP address blocks:        2a12:dd47:816a::/47 maxlen: 48
                          2a12:dd47:8e30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bc:b0:5c:e8:bd:1d:20:b6:5b:a1:ea:ab:4a:4e:03:9f:f5:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:58 2022 GMT
            Not After : Nov 27 12:30:58 2023 GMT
        Subject: CN=BDBD3BD6E078A67673550412EB8B900B8AAFF37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:67:b8:3f:87:1c:8e:b0:b2:38:ec:a3:26:
                    61:51:ca:15:31:8a:82:e9:f8:94:3b:39:c3:64:9d:
                    14:20:b9:58:a6:f4:84:de:6a:48:9a:6e:98:58:78:
                    2a:86:01:a3:a7:d2:85:cb:83:c2:96:cd:d2:81:93:
                    d5:00:76:82:d8:4d:c0:b4:e6:64:3e:68:59:0e:a1:
                    ef:1c:a4:21:21:20:d1:b1:8e:19:1e:c8:0e:90:78:
                    b3:e6:30:3c:ca:2e:b6:23:94:09:18:58:a5:89:83:
                    87:fa:a6:3d:c8:9c:f7:45:eb:e5:79:53:7e:d0:84:
                    54:a5:14:6e:6a:7d:cd:f5:83:9b:b2:17:cc:12:a5:
                    bb:38:f4:16:04:2a:ac:7b:48:24:00:0f:64:48:e7:
                    48:12:fd:f1:eb:dc:3a:9c:3c:01:0a:7b:3f:c9:89:
                    56:e1:f3:b5:0d:ff:e8:b6:02:38:34:f6:66:ec:22:
                    ac:20:e0:66:81:bf:f2:2e:79:6c:ee:f1:b1:2d:13:
                    95:76:2d:22:39:47:69:2a:60:e5:f9:39:c3:36:d0:
                    aa:1a:75:2d:b6:bf:34:2c:14:ac:cc:e5:aa:4e:73:
                    46:bd:c0:09:3f:08:e6:68:c5:b5:c9:d9:b2:a1:14:
                    7f:21:a1:4a:57:7a:22:59:c1:06:e7:3f:e7:83:58:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:3B:D6:E0:78:A6:76:73:55:04:12:EB:8B:90:0B:8A:AF:F3:7B
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS211358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816a::/47
                  2a12:dd47:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:cf:5a:f6:da:56:1f:eb:bc:f0:20:4a:67:69:dd:a7:18:
         dc:d1:b5:fc:3c:cc:0b:a7:fd:45:f6:89:93:b3:3a:3e:32:05:
         29:f4:a2:0b:82:0c:17:7c:eb:1c:f1:ef:37:0c:a1:82:00:cd:
         7f:92:77:dc:36:58:43:7f:09:02:0f:ea:95:b8:e7:9b:c7:39:
         81:34:7a:41:c5:0d:31:6f:21:dc:4b:7a:79:07:53:c5:7e:e3:
         9c:ac:6c:4a:7d:b2:fc:4d:46:9b:25:6d:bf:8a:82:78:72:9c:
         f3:40:79:6a:50:ab:95:0e:67:1d:94:63:7d:a9:52:e3:57:56:
         d6:a7:46:64:24:7e:e9:0e:39:a9:33:97:14:8e:4c:05:63:31:
         4a:37:10:8c:7e:e6:69:e8:04:06:de:0b:93:d6:ea:dd:81:e5:
         35:89:80:f5:d4:16:54:04:8a:8b:11:38:03:d1:6c:0b:0a:cd:
         e8:4e:f0:f4:d4:d1:3c:f4:93:b0:ff:60:29:99:01:49:08:6a:
         52:73:4e:70:38:c9:4c:84:fe:55:b3:61:5f:e6:3b:6e:d9:9c:
         a6:84:28:55:09:43:41:e5:66:a2:55:d4:e4:b7:6a:52:15:5c:
         bc:a0:c2:b7:d4:f2:57:b0:5f:cd:a2:51:75:8f:e6:d3:03:9d:
         6d:77:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----