Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS202996.roa
File:                     AS202996.roa (raw, json)
Hash identifier:          kMstPrtqpAtYnL/jL7tfmMTGdbUUbZpOR7iR6tlZIUM=
Subject key identifier:   9D:10:BB:92:E9:1B:C3:A0:A8:04:8F:BC:AB:23:EB:C0:F6:83:EA:20
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       1ACA3AD6EF15CA1E9936576C45805533D33B6128
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS202996.roa
Signing time:             Fri 23 Sep 2022 23:04:31 +0000
ROA not before:           Fri 23 Sep 2022 22:59:31 +0000
ROA not after:            Fri 22 Sep 2023 23:04:31 +0000
asID:                     202996
IP address blocks:        2a12:dd47:8029::/48 maxlen: 48
                          2a12:dd47:8048::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ca:3a:d6:ef:15:ca:1e:99:36:57:6c:45:80:55:33:d3:3b:61:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:31 2022 GMT
            Not After : Sep 22 23:04:31 2023 GMT
        Subject: CN=9D10BB92E91BC3A0A8048FBCAB23EBC0F683EA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:cc:97:9b:8f:27:9e:67:15:26:7a:db:ce:
                    a0:c5:79:72:45:cc:20:16:da:91:1d:97:e1:04:72:
                    94:55:f5:b2:a2:50:e3:c4:76:f6:81:4d:01:59:de:
                    c1:9a:83:85:a7:54:f9:02:47:09:da:a6:a2:8e:b9:
                    ee:10:68:d8:0d:92:8f:d8:48:94:ad:98:9f:49:f9:
                    20:c9:a7:38:c3:da:20:60:06:29:05:e3:52:73:be:
                    4b:3f:00:68:07:5f:00:3f:bd:b5:8a:d2:02:a6:61:
                    e4:65:39:d8:2d:3e:75:e2:db:53:7e:c2:93:16:15:
                    56:20:14:3f:9e:b8:08:c5:45:39:86:7e:fe:61:9b:
                    0b:47:f7:af:c2:7c:36:fc:fb:2f:12:cf:03:2d:0f:
                    02:b0:4e:61:4f:33:50:1f:99:b1:e1:36:d6:bb:8f:
                    f9:d3:6a:f1:47:16:63:f7:e7:24:1b:6b:65:ab:e0:
                    f7:f4:0a:b4:da:6b:c4:bf:3c:5a:d7:12:6a:81:f2:
                    58:b9:bd:a3:a2:d2:df:04:77:61:9c:eb:ed:60:a0:
                    97:39:6f:7c:73:92:65:1b:60:4c:86:49:4f:d3:7c:
                    24:1e:4f:f5:48:53:78:a8:c1:7e:99:17:68:4b:d3:
                    06:ef:ec:d3:96:73:e0:7f:b0:0a:57:c4:6d:98:3d:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:BB:92:E9:1B:C3:A0:A8:04:8F:BC:AB:23:EB:C0:F6:83:EA:20
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS202996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8029::/48
                  2a12:dd47:8048::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:f3:41:7f:a4:2d:a9:84:6c:de:11:1c:30:9e:96:38:b1:
         5b:69:77:41:92:f2:d0:85:25:c2:6a:4e:0a:0e:06:7c:8e:f1:
         5c:2b:ba:d1:96:b4:f0:ae:c4:67:ba:02:a3:11:ac:06:cf:5a:
         49:a1:03:d8:fd:97:b8:32:5b:e7:a4:c9:60:c8:fb:aa:b9:5a:
         71:6d:89:aa:99:76:28:b7:4b:e8:f1:bc:33:54:16:02:a8:92:
         05:fa:93:de:50:12:76:c2:96:59:66:b3:d4:cd:81:1e:9e:7e:
         19:09:cc:86:bf:91:c8:f2:3a:ef:06:93:0f:13:8b:f8:13:c9:
         d9:e3:eb:30:5f:75:73:67:52:f3:15:82:5e:15:f9:ce:37:b0:
         c7:a0:ea:56:3d:f1:28:b7:f4:21:1a:1b:38:28:3d:58:6f:1c:
         76:91:a0:89:b9:fd:6c:c7:9c:81:3c:fb:84:f1:3b:0e:02:60:
         40:f9:7c:6d:a2:cf:fd:4d:28:38:03:92:68:0b:af:cc:2b:5a:
         de:4f:94:ea:26:81:d4:af:96:e4:f0:81:01:bb:00:6c:72:1b:
         63:c3:71:86:3b:fe:39:12:32:30:e1:8c:be:9e:84:4a:4f:bd:
         7d:c3:28:52:01:6a:7f:d5:6e:f4:3f:0b:a3:27:ba:10:0d:70:
         ff:5f:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----