Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa
File:                     32332e3133392e34312e302f32342d3234203d3e20333935333332.roa (raw, json)
Hash identifier:          71q3vMra8sSN5M0HLUqiVAXgUILQp/FopzAiysb9yTY=
Subject key identifier:   55:82:0C:53:F7:CE:B0:DA:7F:C0:61:58:E6:26:2D:03:C7:91:F6:F1
Certificate issuer:       /CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
Certificate serial:       230C4A0F400988FF9CCAFD50FF7BE41878B4136E
Authority key identifier: 7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa
Signing time:             Thu 21 Jul 2022 21:54:24 +0000
ROA not before:           Thu 21 Jul 2022 21:49:24 +0000
ROA not after:            Thu 20 Jul 2023 21:54:24 +0000
asID:                     395332
IP address blocks:        23.139.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0c:4a:0f:40:09:88:ff:9c:ca:fd:50:ff:7b:e4:18:78:b4:13:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
        Validity
            Not Before: Jul 21 21:49:24 2022 GMT
            Not After : Jul 20 21:54:24 2023 GMT
        Subject: CN=55820C53F7CEB0DA7FC06158E6262D03C791F6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:78:9f:e0:c9:3d:22:a5:17:a3:a2:17:80:
                    85:ac:7c:1c:86:7b:d7:3e:f5:b3:54:c8:31:80:b9:
                    65:d7:bd:9e:39:54:e0:fc:44:22:c9:96:b8:ca:ec:
                    42:59:42:44:96:af:be:df:b3:c7:49:52:04:69:71:
                    68:db:fb:d0:c6:8b:9a:5b:4a:43:4e:d2:4a:08:a6:
                    67:18:c7:2b:82:5f:13:2f:74:ea:d0:71:31:18:80:
                    b2:2a:30:05:64:cf:da:74:8d:ba:60:d0:22:a9:f5:
                    79:47:a4:3b:ea:1e:ce:43:0b:a7:d0:20:77:0a:16:
                    4d:2c:99:80:2e:23:3d:5c:84:17:5a:2b:f6:d2:ec:
                    75:f7:88:ae:42:33:7f:15:81:db:87:b0:6a:82:7c:
                    57:3e:c4:7d:a0:0a:f6:33:c1:18:f6:af:6e:16:38:
                    ff:2d:71:1b:51:69:ec:55:4b:4f:77:bb:ca:b3:22:
                    53:b7:0a:75:9e:5d:44:09:5e:2d:da:17:d5:3c:b9:
                    d5:0f:18:05:d6:90:90:86:17:fb:62:c5:59:f4:c4:
                    14:d4:64:c3:de:d5:df:91:39:68:ad:16:b5:b8:65:
                    9a:43:03:5c:a5:2c:ce:c9:a6:b5:d4:15:8e:13:15:
                    a3:0d:c2:a1:56:57:9c:ff:08:a2:dd:85:7b:c2:ad:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:82:0C:53:F7:CE:B0:DA:7F:C0:61:58:E6:26:2D:03:C7:91:F6:F1
            X509v3 Authority Key Identifier:
                keyid:7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/10/7A988BFDDF3EBDC12A6626E2E2D69FA3205501D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/10/32332e3133392e34312e302f32342d3234203d3e20333935333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:7d:72:aa:29:22:76:44:43:23:12:04:a1:4f:d7:2f:c1:
         2b:b5:f5:a8:27:6d:39:37:9c:5a:cd:11:13:e2:74:a5:1f:3d:
         5d:9a:2c:15:75:a7:b8:4e:5e:79:ea:d1:2f:14:be:e7:41:15:
         c5:14:3f:3d:85:39:05:20:03:66:d4:9f:be:d7:24:95:d6:58:
         64:ed:55:65:8e:5f:8b:0f:b2:80:07:d7:88:d6:db:7f:8a:11:
         00:26:78:73:bb:0f:b9:ef:03:64:63:e1:04:42:4e:3f:af:b2:
         0a:ca:dd:18:e3:9c:4b:20:65:2d:93:14:61:22:fd:62:7e:a9:
         8c:f6:ba:e5:59:c2:03:43:b1:70:2c:08:17:b5:19:8f:e4:69:
         b8:ef:84:d5:bb:59:05:69:7c:f6:6a:13:85:b7:6e:d0:4a:99:
         7c:17:92:a6:32:3c:92:13:59:03:c3:61:e2:7d:23:e9:88:87:
         0a:34:76:49:aa:e3:83:8c:7c:6d:d7:11:84:ea:8c:94:20:ce:
         23:02:b0:22:13:17:8f:b3:8c:e0:42:a5:87:96:aa:eb:0d:6e:
         10:95:8e:ee:49:9b:d2:0b:84:29:bc:7e:5a:76:7a:19:07:6a:
         2c:c0:c2:5e:c6:9a:5d:b6:fe:4e:5b:37:14:b1:0f:e7:d1:b1:
         5e:ed:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----