Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS211390.roa
File:                     AS211390.roa (raw, json)
Hash identifier:          /aI5KZlOL5Iqbs2nCYT/ux04KhUc8e6hQHY8/eYdJ0U=
Subject key identifier:   DF:DB:B5:B4:D4:D5:E0:B0:BA:0A:75:05:EA:56:C4:02:AB:33:0E:E5
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       7AB8A22F153E1B8E5A0220FDD79B02F18E07E4E3
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS211390.roa
Signing time:             Tue 22 Nov 2022 08:29:38 +0000
ROA not before:           Tue 22 Nov 2022 08:24:38 +0000
ROA not after:            Tue 21 Nov 2023 08:29:38 +0000
asID:                     211390
IP address blocks:        2a12:dd47:83e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b8:a2:2f:15:3e:1b:8e:5a:02:20:fd:d7:9b:02:f1:8e:07:e4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov 22 08:24:38 2022 GMT
            Not After : Nov 21 08:29:38 2023 GMT
        Subject: CN=DFDBB5B4D4D5E0B0BA0A7505EA56C402AB330EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:a2:09:ab:8b:90:a5:73:57:18:93:7f:41:
                    ee:3a:52:ec:67:c4:18:09:80:12:ee:1d:3b:18:7c:
                    53:eb:bc:ed:70:a2:27:e3:6b:e0:f7:34:ac:82:6d:
                    8c:13:d0:7a:12:ee:e6:4c:7e:16:88:b2:38:8e:76:
                    53:9c:94:5c:5e:be:70:3e:8d:29:71:ac:37:34:84:
                    f3:57:ee:f3:b0:44:e9:a6:d2:e6:9a:00:fd:67:45:
                    47:d2:29:ac:0e:7c:e8:d6:59:b0:33:54:ba:1c:13:
                    ee:03:3f:e9:35:88:21:5b:3f:2f:2b:da:5e:1c:c9:
                    d3:8b:00:95:6d:44:72:a6:16:8f:f7:c6:07:1f:a8:
                    8d:91:c0:9a:4b:ca:56:34:48:58:cb:a4:19:11:50:
                    ca:a6:fa:37:cb:8e:eb:b4:0e:88:77:ae:5f:9f:9b:
                    d1:1b:05:9a:74:06:da:5b:32:dc:9c:ab:53:8e:61:
                    b1:e0:6c:6d:c2:91:89:b1:bd:63:db:fb:95:91:21:
                    35:a1:23:83:54:e6:7f:65:2d:60:10:69:b6:f0:d7:
                    1f:ae:59:78:22:2e:f6:d1:d2:13:69:6c:7f:a8:c2:
                    2d:78:73:b7:12:ac:a5:c8:cc:da:bc:76:fd:de:3f:
                    45:7f:98:f0:0b:1e:17:3e:e1:36:5a:e8:71:ef:5d:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:B5:B4:D4:D5:E0:B0:BA:0A:75:05:EA:56:C4:02:AB:33:0E:E5
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS211390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:17:b0:9f:7e:ba:a5:d6:87:25:9c:8c:a1:d4:b9:da:5b:
         31:07:2b:86:25:38:f0:69:27:04:27:69:8a:45:ab:06:4c:a5:
         a2:2c:ca:d1:85:ac:ef:31:b9:ca:51:5f:91:33:5b:b7:93:77:
         5b:69:d3:76:08:48:9e:ab:4c:6d:2f:83:2f:48:26:05:5d:70:
         41:0c:12:3d:ca:32:0e:48:6c:01:d0:50:47:68:72:dc:5d:dd:
         af:75:eb:9d:73:59:46:29:ea:60:4a:68:62:6f:ae:89:24:b7:
         18:23:1e:5c:f5:1d:58:cb:1e:f8:02:c4:35:19:33:94:f0:7d:
         d4:fb:a5:38:0f:01:43:3a:87:00:1d:8b:dd:3c:16:fe:72:de:
         af:8d:77:85:9d:35:9d:79:ec:95:b0:ac:06:42:67:dd:4e:9e:
         a5:ea:bf:82:4c:02:f4:5b:d3:35:8a:83:8f:a8:3b:f1:22:8c:
         42:79:f0:36:1c:c6:5d:71:0d:88:b6:a7:9a:2a:12:33:34:07:
         6e:67:ea:b2:63:05:e7:1b:8a:99:d2:b3:9c:f0:5a:ff:b6:46:
         d1:5d:b2:1b:43:3b:f7:32:4c:80:71:d7:1c:48:5b:19:d9:c1:
         08:37:c1:f1:17:69:0e:2d:af:f4:1e:8a:fb:07:60:c2:92:ff:
         79:d7:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----