Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/9/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          sGyYnLa16wuP4WW0v7HjPlBJfcewB8sSJEN4QNV4188=
Subject key identifier:   75:FA:FD:DC:5E:FF:60:CB:23:83:6F:47:4C:A8:20:68:71:20:DC:3E
Certificate issuer:       /CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
Certificate serial:       402F8B81CF898F8EC550E60D7BC3B779EAFA413D
Authority key identifier: E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Mon 28 Nov 2022 12:30:42 +0000
ROA not before:           Mon 28 Nov 2022 12:25:42 +0000
ROA not after:            Mon 27 Nov 2023 12:30:42 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2f:8b:81:cf:89:8f:8e:c5:50:e6:0d:7b:c3:b7:79:ea:fa:41:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
        Validity
            Not Before: Nov 28 12:25:42 2022 GMT
            Not After : Nov 27 12:30:42 2023 GMT
        Subject: CN=75FAFDDC5EFF60CB23836F474CA820687120DC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:90:7c:20:ee:8f:05:12:c4:84:0d:d0:ad:
                    5e:06:de:0d:0c:07:03:ff:be:04:b4:d0:f0:66:c2:
                    ff:1d:3d:20:a1:ca:6b:73:22:f7:8d:ab:0d:36:9f:
                    5b:e5:19:b5:05:30:5b:88:96:3e:03:d3:ca:b1:ee:
                    ef:b1:26:9e:cc:ee:f5:b3:1d:20:a7:a1:9b:0c:49:
                    a6:ba:b4:90:67:0b:43:0b:f2:85:6e:a9:9d:29:4e:
                    8d:ba:e1:44:e9:5f:f5:34:82:ca:24:5d:e0:66:c7:
                    02:52:7f:1e:96:76:4d:1b:bb:a4:9a:63:dd:92:59:
                    2b:1d:40:dc:b0:75:f3:4f:58:55:ff:b7:d7:19:3b:
                    78:93:ec:38:69:ab:fd:74:a4:a0:bc:fb:41:6f:90:
                    6f:49:79:45:7d:22:a0:f7:4c:07:45:3d:1e:6c:73:
                    80:cb:63:ec:a4:ef:d5:c4:f2:28:3d:88:92:a9:bd:
                    a0:90:13:30:a7:8c:92:df:4e:5b:ee:a7:bb:ce:aa:
                    40:da:23:83:44:21:2d:f9:86:4f:8c:9b:be:f4:27:
                    85:43:45:4a:39:d2:77:57:71:a8:04:22:be:e5:ad:
                    d7:6d:5a:12:82:05:88:7e:ef:3a:06:0e:f2:53:46:
                    13:da:47:6c:73:8c:9a:56:60:85:d4:c9:33:4f:36:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:FD:DC:5E:FF:60:CB:23:83:6F:47:4C:A8:20:68:71:20:DC:3E
            X509v3 Authority Key Identifier:
                keyid:E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/9/E1EC207176257B5082C6178EDAED9385D140735D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:5e:5e:b8:f2:80:6c:c1:b0:6d:1c:6e:64:df:ca:83:9e:
         ca:fd:60:ec:18:ee:b4:69:df:8d:3c:17:ce:bb:7c:e5:5a:47:
         8c:92:73:27:88:01:4f:de:36:39:81:2a:67:39:c8:3f:9e:e6:
         30:5f:1b:7b:08:e1:8b:dc:b6:c7:c6:a3:12:ae:82:b1:a7:36:
         db:81:cd:99:f1:24:1a:2f:d8:83:e3:0d:78:7d:13:87:d0:cb:
         b7:43:ec:4d:90:06:f8:f7:62:0b:c5:66:c1:0c:06:25:24:a5:
         0b:2d:05:77:82:f1:7e:7b:30:a3:c7:2a:34:2d:be:a9:d9:6b:
         55:76:68:ca:3d:9e:81:30:47:ba:32:be:17:92:24:4f:e1:40:
         42:87:17:87:ea:e2:a8:d9:30:47:7d:de:49:0e:85:37:c1:28:
         1a:69:5a:21:80:ab:64:38:a0:a6:b8:4d:52:04:d2:e3:80:06:
         7c:95:a4:29:a0:bb:76:da:aa:43:72:b1:bb:ad:95:fc:41:76:
         59:6d:70:7a:94:bc:ee:56:ba:32:ff:f8:04:74:b1:79:9b:50:
         2c:f4:29:c2:4b:c4:bb:c3:2d:ab:5f:e9:70:07:4d:ab:37:84:
         b9:d6:a4:14:06:bb:6e:bb:73:65:34:be:2e:09:e6:8e:c3:93:
         08:24:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----