Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          NM1HhHlNh6k+Z638c5v2EHoYKVjo7BAQcACVL9ItXKs=
Subject key identifier:   AB:EA:A2:D5:C3:B4:5E:FC:AF:03:A0:A8:3D:D3:46:5D:79:56:91:43
Certificate issuer:       /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial:       3C20E0047DE9086DE88FAC72F55146D3A653BB51
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 23 Apr 2022 23:07:34 +0000
ROA not before:           Sat 23 Apr 2022 23:02:34 +0000
ROA not after:            Sat 22 Apr 2023 23:07:34 +0000
asID:                     50058
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:e0:04:7d:e9:08:6d:e8:8f:ac:72:f5:51:46:d3:a6:53:bb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
        Validity
            Not Before: Apr 23 23:02:34 2022 GMT
            Not After : Apr 22 23:07:34 2023 GMT
        Subject: CN=ABEAA2D5C3B45EFCAF03A0A83DD3465D79569143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:32:d4:67:da:ce:55:c5:25:1b:37:0b:b0:
                    44:14:80:55:77:26:d3:1c:56:4a:5e:fc:fc:12:21:
                    b3:eb:4c:f4:ff:07:89:d7:49:7b:6b:e3:09:be:60:
                    e4:d6:c5:6e:bc:11:4d:6e:15:56:53:b0:5b:25:63:
                    0f:13:6f:5b:22:f0:9e:83:63:15:3d:c0:0e:c6:37:
                    c3:e7:c4:f0:4a:d4:d2:fa:a5:cd:30:71:e2:5f:09:
                    58:5e:c5:4d:77:cc:d2:5c:8e:09:78:63:c6:20:d0:
                    a9:79:91:e0:08:03:3d:83:a1:b9:77:5f:f1:b2:81:
                    fc:42:b3:21:58:52:9b:88:99:59:49:ec:32:5d:2a:
                    3d:23:14:67:7d:51:4c:30:b5:2e:b6:e0:b4:ea:26:
                    d8:2b:3a:35:01:4d:73:d3:ca:f2:e6:e1:da:e6:47:
                    1c:12:28:40:14:c7:3b:05:ba:ff:a8:85:38:6c:a3:
                    6d:38:71:06:40:91:fe:86:1b:1f:f0:6d:a1:cb:40:
                    61:79:54:81:62:44:15:83:3f:1d:3d:80:c2:eb:d5:
                    87:5f:c4:bb:2a:1f:9a:e9:1f:3b:d5:4a:0b:6a:65:
                    4f:29:7a:f5:04:37:ff:a1:e0:b4:d8:2a:0c:aa:24:
                    9b:6d:ad:9c:07:c5:a8:df:11:1e:fc:70:89:2a:65:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EA:A2:D5:C3:B4:5E:FC:AF:03:A0:A8:3D:D3:46:5D:79:56:91:43
            X509v3 Authority Key Identifier:
                keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:d2:76:8d:57:e2:92:d8:35:5b:4d:ba:bb:06:7e:58:c9:
         77:2e:a1:7b:e5:39:3c:91:7a:c3:89:17:7e:10:ed:d2:89:19:
         51:e6:80:94:59:e3:61:90:83:d7:2e:72:ad:fa:35:85:96:f8:
         2f:0e:a1:f2:d0:d9:d7:c7:9c:4a:cc:7d:09:2e:9e:0f:25:f5:
         9a:e9:ab:33:6a:66:1e:c2:0d:68:e2:ce:57:b0:c1:4d:82:49:
         bc:21:71:a6:85:7f:5b:1f:df:5d:68:ed:46:4e:13:6c:6d:b9:
         6d:bf:8c:80:2e:96:f4:6c:75:52:ae:17:10:23:e1:46:16:c2:
         b7:78:d8:ed:d6:f0:83:66:ec:5b:11:ea:08:4d:41:63:74:73:
         ed:df:0f:64:33:3c:8a:53:ac:87:21:d7:9d:d8:b0:be:e9:75:
         ee:e8:f2:26:37:35:f6:28:d3:a2:cf:4e:06:65:88:52:7c:23:
         e8:7f:24:fa:a0:63:96:de:0b:2e:a9:b4:c3:36:60:0e:4d:f0:
         b6:4a:a3:d4:2a:05:93:de:11:d8:41:af:23:6c:65:8f:aa:12:
         e5:08:27:da:5a:c0:5b:ff:fb:92:e4:3a:35:16:89:c3:e3:e9:
         a0:17:1e:24:49:d6:77:16:1f:12:0a:64:80:aa:98:25:ce:b9:
         df:70:81:9c
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUPCDgBH3pCG3oj6xy9VFG06ZTu1EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmZmQ2ZDE1M2Y5Y2Q1MjljY2FhZDVk
YzQ5ZDE4ZjA4YTA4NTg3M2MwHhcNMjIwNDIzMjMwMjM0WhcNMjMwNDIyMjMwNzM0
WjAzMTEwLwYDVQQDEyhBQkVBQTJENUMzQjQ1RUZDQUYwM0EwQTgzREQzNDY1RDc5
NTY5MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZQy1GfazlXF
JRs3C7BEFIBVdybTHFZKXvz8EiGz60z0/weJ10l7a+MJvmDk1sVuvBFNbhVWU7Bb
JWMPE29bIvCeg2MVPcAOxjfD58TwStTS+qXNMHHiXwlYXsVNd8zSXI4JeGPGINCp
eZHgCAM9g6G5d1/xsoH8QrMhWFKbiJlZSewyXSo9IxRnfVFMMLUutuC06ibYKzo1
AU1z08ry5uHa5kccEihAFMc7Bbr/qIU4bKNtOHEGQJH+hhsf8G2hy0BheVSBYkQV
gz8dPYDC69WHX8S7Kh+a6R871UoLamVPKXr1BDf/oeC02CoMqiSbba2cB8Wo3xEe
/HCJKmUJMwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKvqotXDtF78rwOgqD3TRl15
VpFDMB8GA1UdIwQYMBaAFDJxaqFhwrDRbRFkMuN5CWOePKZyMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzAvMzI3MTZBQTE2MUMyQjBEMTZEMTE2NDMyRTM3OTA5NjM5
RTNDQTY3Mi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00
Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIw
NGZkZDY2M2YzNy82NTA2YTY2ZWQwZWZmZDZkMTUzZjljZDUyOWNjYWFkNWRjNDlk
MThmMDhhMDg1ODczYy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpLmF1Z3VzdC50dy9yZXBvL2xvY2FsbmFtZS8wLzMxMzYzNTJl
MzEzNDMwMmUzMTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzAzNTM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQApYyOMA0GCSqGSIb3DQEBCwUAA4IBAQAs8tJ2jVfiktg1W026
uwZ+WMl3LqF75Tk8kXrDiRd+EO3SiRlR5oCUWeNhkIPXLnKt+jWFlvgvDqHy0NnX
x5xKzH0JLp4PJfWa6aszamYewg1o4s5XsMFNgkm8IXGmhX9bH99daO1GThNsbblt
v4yALpb0bHVSrhcQI+FGFsK3eNjt1vCDZuxbEeoITUFjdHPt3w9kMzyKU6yHIded
2LC+6XXu6PImNzX2KNOiz04GZYhSfCPofyT6oGOW3gsuqbTDNmAOTfC2SqPUKgWT
3hHYQa8jbGWPqhLlCCfaWsBb//uS5Do1FonD4+mgFx4kSdZ3Fh8SCmSAqpglzrnf
cIGc
-----END CERTIFICATE-----