Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/9/3231362e3134362e32392e302f32342d3234203d3e203136353039.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          8RPVLgezMX3C4MJ1pZYAM191p3eLQN2JrdeP4K+bQG0=
Subject key identifier:   1A:AA:38:1C:AE:CD:DB:2E:0F:9A:E3:77:97:B7:15:58:59:0C:31:49
Certificate issuer:       /CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
Certificate serial:       78F9D525DE9EFF33E4E0A611AC4BC99AAEE808DA
Authority key identifier: 5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/9/3231362e3134362e32392e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 21 Jun 2022 18:32:31 +0000
ROA not before:           Tue 21 Jun 2022 18:27:31 +0000
ROA not after:            Tue 20 Jun 2023 18:32:31 +0000
asID:                     16509
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f9:d5:25:de:9e:ff:33:e4:e0:a6:11:ac:4b:c9:9a:ae:e8:08:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
        Validity
            Not Before: Jun 21 18:27:31 2022 GMT
            Not After : Jun 20 18:32:31 2023 GMT
        Subject: CN=1AAA381CAECDDB2E0F9AE37797B71558590C3149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:3f:03:71:4e:b7:6c:1d:86:99:ae:7a:38:
                    77:8a:16:8a:58:c2:43:56:3f:d1:68:30:54:ca:76:
                    58:89:47:04:36:a9:47:ea:0c:0f:99:13:78:b9:29:
                    2e:1d:d6:16:69:47:2f:72:4d:b5:35:f9:59:d7:0a:
                    b3:26:c2:88:1d:a9:a7:7b:da:22:a1:e8:f9:83:46:
                    cd:9f:29:2c:6f:29:dc:c5:48:19:0e:24:0d:c1:cf:
                    99:9a:da:ad:15:0a:62:e1:36:23:a1:a7:b0:af:04:
                    b6:77:83:9f:3f:79:86:49:07:39:12:91:eb:44:4c:
                    e4:00:a2:b6:b6:74:bf:ed:c3:52:bc:7c:ea:1c:35:
                    63:08:4a:9b:5c:23:4f:d7:21:9b:c8:46:14:c4:40:
                    c9:ff:c0:25:7e:83:bf:a5:eb:d2:e2:c5:89:dd:67:
                    1d:d3:09:d6:e1:9d:63:d0:70:e2:6d:71:65:0c:a7:
                    4f:98:2f:c4:f6:48:59:4c:98:22:e4:ee:22:46:f8:
                    15:96:c1:7c:89:0f:02:7e:01:33:70:c2:a1:e5:b3:
                    ca:ed:43:09:24:fd:8e:04:83:32:0e:9d:9a:e2:db:
                    d4:09:0e:df:15:f4:67:b9:78:59:d0:01:43:fa:c6:
                    26:c1:09:18:8a:a9:5e:05:f7:1d:25:6b:8d:52:10:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:38:1C:AE:CD:DB:2E:0F:9A:E3:77:97:B7:15:58:59:0C:31:49
            X509v3 Authority Key Identifier:
                keyid:5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/9/5E6C5798EB917BF45568B24B358FDEE7E96EB13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/9/3231362e3134362e32392e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1d:58:6d:37:1a:11:4c:86:04:6a:19:3c:54:fb:f8:c9:d2:
         78:7a:b1:8c:10:15:a9:fc:21:c1:0c:99:3e:92:34:a9:c4:4d:
         52:0b:1d:55:16:11:2b:a8:47:4e:19:3d:db:76:8a:ce:41:66:
         3d:9f:64:51:a1:89:16:aa:f7:e0:c9:69:90:38:eb:f0:1e:0a:
         ee:f6:0f:e7:d1:e7:db:de:8d:ac:c0:06:1e:e5:0c:27:af:34:
         b3:42:dd:35:1d:31:9c:16:d7:6d:f0:e8:bd:4d:e1:a3:97:7f:
         40:e0:51:0a:df:f6:85:ef:b4:42:5b:62:48:66:66:ab:26:4a:
         aa:cd:d8:18:6f:bc:5c:fe:63:d0:85:1c:e0:a6:89:da:14:92:
         45:8e:38:dd:8c:15:2c:5a:19:11:74:44:86:8b:fa:e5:af:2d:
         6b:a2:61:6d:1d:56:e3:81:47:9c:be:ba:e2:86:34:e2:d8:a7:
         2b:a3:34:d5:1d:8e:bd:17:28:7f:b8:af:c9:b0:67:6a:7e:1c:
         6f:f6:ea:24:a0:16:17:b2:21:32:35:1c:ff:5d:7d:63:f3:c7:
         e2:30:92:63:23:29:9e:56:13:98:6f:65:f6:e6:41:7c:1c:6b:
         18:d9:3c:18:a9:a6:2c:d1:b2:a2:5f:10:48:c4:32:03:d4:80:
         23:9c:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----