Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203134363138.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          B/WW/JBweneXoY6t4/jyOA7iBQp8RXtIsRsEdPgkE4Y=
Subject key identifier:   40:8C:8D:61:84:63:49:ED:CE:86:CB:25:68:BD:97:0E:E4:88:33:98
Certificate issuer:       /CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
Certificate serial:       7D8E27C4EB43FD23619A73CEE0A667A2CFC37D0B
Authority key identifier: E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 28 Nov 2022 12:30:44 +0000
ROA not before:           Mon 28 Nov 2022 12:25:44 +0000
ROA not after:            Mon 27 Nov 2023 12:30:44 +0000
asID:                     14618
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8e:27:c4:eb:43:fd:23:61:9a:73:ce:e0:a6:67:a2:cf:c3:7d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
        Validity
            Not Before: Nov 28 12:25:44 2022 GMT
            Not After : Nov 27 12:30:44 2023 GMT
        Subject: CN=408C8D61846349EDCE86CB2568BD970EE4883398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:e3:c1:39:9b:d6:8f:07:34:88:54:db:51:
                    35:c5:67:93:57:5a:52:f2:de:a0:28:f7:a4:1c:5a:
                    34:6b:eb:7d:1d:fb:e8:eb:1b:bb:c8:2e:43:e7:6b:
                    7a:9e:a0:9b:c1:3c:e7:ae:d5:75:c5:4b:9e:cb:02:
                    b9:7c:fd:c0:94:4b:77:03:0d:9b:9b:e5:08:d6:d5:
                    df:e1:77:d5:8e:07:dc:ad:97:56:a3:d0:69:88:96:
                    f9:a5:5a:1c:a0:43:19:84:00:82:7b:9f:d3:03:85:
                    5c:80:27:5e:34:13:90:4c:e3:33:24:d9:86:87:4d:
                    5d:77:b4:3e:a6:57:f6:ea:7b:00:01:aa:f4:ad:ce:
                    48:f0:8d:13:f0:0a:92:e2:e9:e3:1b:87:65:37:77:
                    f6:73:a6:d1:48:4b:c1:4f:5d:a3:48:9f:38:14:6a:
                    61:a3:33:f0:ab:0f:69:3f:3d:4d:31:1f:db:ac:c9:
                    5a:88:a4:32:1a:7a:e2:d6:b5:1a:d1:62:b5:6b:db:
                    8e:d2:36:8a:a8:d6:ce:d9:98:4b:7f:c5:98:f4:d6:
                    f2:c9:50:62:48:77:c8:be:df:52:54:c4:df:97:28:
                    b0:2a:87:0a:36:e4:77:c3:22:72:23:15:49:12:7b:
                    ff:2d:04:16:fd:67:e3:cf:74:ea:4e:aa:e7:b8:7f:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:8D:61:84:63:49:ED:CE:86:CB:25:68:BD:97:0E:E4:88:33:98
            X509v3 Authority Key Identifier:
                keyid:E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/9/E1EC207176257B5082C6178EDAED9385D140735D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:7f:5e:08:f0:83:2c:02:85:97:bc:88:8a:dc:59:6a:4f:
         34:91:a7:ea:99:1d:2f:28:e7:56:72:c4:c1:6e:06:a4:c6:02:
         5b:01:3d:dd:9f:a6:13:76:64:1e:f8:7a:7f:da:29:5d:8a:01:
         a5:44:67:5b:24:6d:b7:04:e5:a9:31:d1:3a:84:17:7f:8a:fe:
         a9:c9:7f:c0:1e:a5:87:80:d0:e8:f9:cd:20:b9:56:b6:43:fa:
         34:b5:07:7f:7b:7a:44:39:0a:fb:f8:6a:3c:0f:37:d1:5b:1f:
         3d:df:fe:c7:2f:53:24:f2:7c:b2:9c:aa:fb:a3:c4:21:18:2c:
         af:72:11:20:44:bc:cf:6b:27:dd:fe:ab:44:c7:4d:20:4d:c5:
         d2:1b:45:4c:f1:e9:30:fd:18:b9:17:28:23:18:e8:7b:12:3b:
         af:6f:62:6b:dd:c1:cc:6e:88:5a:b0:be:fe:fe:65:6f:b6:bd:
         b1:7c:43:65:25:5b:b1:d2:82:37:51:2e:a4:c1:74:8a:7a:b6:
         01:95:f1:38:87:3b:ee:0f:b7:32:b7:63:1c:cf:5a:c9:06:54:
         8a:c4:85:c0:d2:11:d1:89:ea:d0:ab:5d:d9:ea:8c:fd:a9:11:
         93:90:1e:ff:b1:2b:89:db:64:38:9b:7a:fc:3e:11:7a:dd:77:
         d4:94:ce:3e
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUfY4nxOtD/SNhmnPO4KZnos/DfQswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWViZGE0NzkxOTJhMmJhN2VkMTA4ZDRkZTEzNjQ2OTcx
NjA2M2EwYzYwNmQxN2Q2NGIwHhcNMjIxMTI4MTIyNTQ0WhcNMjMxMTI3MTIzMDQ0
WjAzMTEwLwYDVQQDEyg0MDhDOEQ2MTg0NjM0OUVEQ0U4NkNCMjU2OEJEOTcwRUU0
ODgzMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusDjwTmb1o8H
NIhU21E1xWeTV1pS8t6gKPekHFo0a+t9Hfvo6xu7yC5D52t6nqCbwTznrtV1xUue
ywK5fP3AlEt3Aw2bm+UI1tXf4XfVjgfcrZdWo9BpiJb5pVocoEMZhACCe5/TA4Vc
gCdeNBOQTOMzJNmGh01dd7Q+plf26nsAAar0rc5I8I0T8AqS4unjG4dlN3f2c6bR
SEvBT12jSJ84FGphozPwqw9pPz1NMR/brMlaiKQyGnri1rUa0WK1a9uO0jaKqNbO
2ZhLf8WY9NbyyVBiSHfIvt9SVMTflyiwKocKNuR3wyJyIxVJEnv/LQQW/Wfjz3Tq
TqrnuH+aXwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFECMjWGEY0ntzobLJWi9lw7k
iDOYMB8GA1UdIwQYMBaAFOHsIHF2JXtQgsYXjtrtk4XRQHNdMA4GA1UdDwEB/wQE
AwIHgDBgBgNVHR8EWTBXMFWgU6BRhk9yc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vSFlTUC85L0UxRUMyMDcxNzYyNTdCNTA4MkM2MTc4RURBRUQ5Mzg1RDE0MDcz
NUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1h
Y2NlLTEzNzIyN2U5NzFhYy81NGMwYWJlOC0wYTA0LTQzMTYtYWZmMi05Y2RmZjA1
MjJmYmQvZWViZGE0NzkxOTJhMmJhN2VkMTA4ZDRkZTEzNjQ2OTcxNjA2M2EwYzYw
NmQxN2Q2NGIuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5bmM6
Ly9ycGtpLmF1Z3VzdC50dy9yZXBvL0hZU1AvOS8zMjMxMzYyZTMxMzQzNjJlMzIz
OTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY
kh0wDQYJKoZIhvcNAQELBQADggEBAEPif14I8IMsAoWXvIiK3FlqTzSRp+qZHS8o
51ZyxMFuBqTGAlsBPd2fphN2ZB74en/aKV2KAaVEZ1skbbcE5akx0TqEF3+K/qnJ
f8AepYeA0Oj5zSC5VrZD+jS1B397ekQ5Cvv4ajwPN9FbHz3f/scvUyTyfLKcqvuj
xCEYLK9yESBEvM9rJ93+q0THTSBNxdIbRUzx6TD9GLkXKCMY6HsSO69vYmvdwcxu
iFqwvv7+ZW+2vbF8Q2UlW7HSgjdRLqTBdIp6tgGV8TiHO+4PtzK3YxzPWskGVIrE
hcDSEdGJ6tCrXdnqjP2pEZOQHv+xK4nbZDibevw+EXrdd9SUzj4=
-----END CERTIFICATE-----