Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e20323032363835.roa
File:                     32332e3133332e382e302f32342d3234203d3e20323032363835.roa (raw, json)
Hash identifier:          n9YMmwuwp2KNWvjDOpdpnM/FzpHP046VcOYD6Vd87Yo=
Subject key identifier:   27:0E:85:80:D3:DE:71:5B:7A:04:9A:FD:C8:EF:24:AE:E1:58:2D:3C
Certificate issuer:       /CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
Certificate serial:       4EB39521777A33FC642DBC4DF35662625301575C
Authority key identifier: 5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e20323032363835.roa
Signing time:             Sat 29 Oct 2022 13:23:38 +0000
ROA not before:           Sat 29 Oct 2022 13:18:38 +0000
ROA not after:            Sat 28 Oct 2023 13:23:38 +0000
asID:                     202685
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b3:95:21:77:7a:33:fc:64:2d:bc:4d:f3:56:62:62:53:01:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
        Validity
            Not Before: Oct 29 13:18:38 2022 GMT
            Not After : Oct 28 13:23:38 2023 GMT
        Subject: CN=270E8580D3DE715B7A049AFDC8EF24AEE1582D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:6b:20:da:8d:6d:ba:a8:ce:e6:55:ce:2d:
                    e8:f3:e9:38:27:93:f2:23:89:87:27:c6:9a:29:c4:
                    af:79:66:23:09:de:df:51:33:84:91:e9:aa:b3:31:
                    5b:0d:e7:df:d9:9b:0c:b3:4a:57:f4:e7:fc:33:e4:
                    a2:5b:d6:ef:13:78:bc:6f:07:c1:2a:9b:36:1e:b2:
                    ca:ea:b2:9e:22:96:2b:e8:f8:5c:3c:13:69:13:df:
                    dd:bd:23:fe:54:e7:90:52:1b:91:72:39:46:04:de:
                    78:a8:07:3f:76:b2:91:ac:df:b2:27:76:1c:86:7b:
                    af:22:04:a5:4c:5c:ce:54:3b:96:10:d8:21:60:aa:
                    d6:fa:94:f4:08:67:29:15:7b:93:2a:7a:53:b3:27:
                    d7:70:b8:31:b8:f8:63:ce:c5:6a:22:22:e9:8c:6b:
                    a6:3d:64:a6:84:d7:f0:5b:0d:e6:fd:19:61:a2:d9:
                    3b:6a:c1:2d:dc:f6:63:12:82:4b:06:4d:89:0e:37:
                    92:93:10:7b:e6:f2:b6:c1:1b:5c:f1:fd:1e:ce:da:
                    66:74:f6:55:43:ca:2a:de:25:77:34:8e:49:ab:f8:
                    b3:24:83:f7:83:a2:1c:ee:e2:89:a9:f9:48:ab:f8:
                    e6:ff:4c:e4:89:de:4a:fe:72:f8:e9:f1:d7:64:d0:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:85:80:D3:DE:71:5B:7A:04:9A:FD:C8:EF:24:AE:E1:58:2D:3C
            X509v3 Authority Key Identifier:
                keyid:5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/9/5E6C5798EB917BF45568B24B358FDEE7E96EB13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e20323032363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:54:3b:db:3d:d1:20:78:45:e3:a6:73:be:12:d3:42:ea:0e:
         ef:35:2c:ad:a6:d9:f1:69:48:73:a5:e9:01:af:f9:a8:2e:83:
         e3:37:fe:c9:45:c7:35:56:0a:54:e9:6f:18:f7:d1:0a:2c:22:
         df:59:bd:33:0e:2c:78:a1:01:2c:3d:fe:e9:f5:62:0c:79:be:
         b5:3a:f4:31:b3:d6:56:73:58:5d:ad:8a:69:04:04:4d:78:cb:
         98:04:b5:97:a0:28:dd:4f:a3:a4:6e:e5:ce:ec:f2:b4:c0:a8:
         e6:42:70:bb:51:18:cd:04:a8:0a:10:74:2e:54:ee:63:2f:d3:
         e2:f3:6b:b7:b2:ff:7e:04:5d:9d:89:0a:3d:c6:f0:e8:ad:bd:
         32:f1:e9:98:d6:a9:4c:6a:de:5e:a4:e5:2f:9d:45:2c:0e:9e:
         5f:63:cf:62:9a:8b:eb:b1:cd:d6:45:f8:d7:e6:c5:26:43:7e:
         c9:2c:f4:56:16:20:59:94:4c:c4:3d:81:ae:7b:cf:a2:e6:1f:
         07:27:53:09:aa:87:9d:3a:1e:88:39:4b:c1:62:45:54:06:20:
         40:48:f0:10:e9:57:ac:4c:46:ea:d8:35:84:a4:52:e3:b9:9c:
         a3:ce:71:5b:96:1d:da:75:99:39:0d:f7:c2:13:ac:7f:17:bc:
         30:69:a1:a4
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUTrOVIXd6M/xkLbxN81ZiYlMBV1wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWViZGE0NzkxOWE4YWRmOTM4MjdiZmJmNDNmZmE5Njc2
Y2YzYTRiOWMxYTE2N2FhZWIwHhcNMjIxMDI5MTMxODM4WhcNMjMxMDI4MTMyMzM4
WjAzMTEwLwYDVQQDEygyNzBFODU4MEQzREU3MTVCN0EwNDlBRkRDOEVGMjRBRUUx
NTgyRDNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC5rINqNbbqo
zuZVzi3o8+k4J5PyI4mHJ8aaKcSveWYjCd7fUTOEkemqszFbDeff2ZsMs0pX9Of8
M+SiW9bvE3i8bwfBKps2HrLK6rKeIpYr6PhcPBNpE9/dvSP+VOeQUhuRcjlGBN54
qAc/drKRrN+yJ3YchnuvIgSlTFzOVDuWENghYKrW+pT0CGcpFXuTKnpTsyfXcLgx
uPhjzsVqIiLpjGumPWSmhNfwWw3m/Rlhotk7asEt3PZjEoJLBk2JDjeSkxB75vK2
wRtc8f0eztpmdPZVQ8oq3iV3NI5Jq/izJIP3g6Ic7uKJqflIq/jm/0zkid5K/nL4
6fHXZNClHwIDAQABo4ICajCCAmYwHQYDVR0OBBYEFCcOhYDT3nFbegSa/cjvJK7h
WC08MB8GA1UdIwQYMBaAFF5sV5jrkXv0VWiySzWP3ufpbrE6MA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzkvNUU2QzU3OThFQjkxN0JGNDU1NjhCMjRCMzU4RkRFRTdF
OTZFQjEzQS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00
Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU0YzBhYmU4LTBhMDQtNDMxNi1hZmYyLTlj
ZGZmMDUyMmZiZC9lZWJkYTQ3OTE5YThhZGY5MzgyN2JmYmY0M2ZmYTk2NzZjZjNh
NGI5YzFhMTY3YWFlYi5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kuYXVndXN0LnR3L3JlcG8vbG9jYWxuYW1lLzkvMzIzMzJlMzEz
MzMzMmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM2MzgzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEABeFCDANBgkqhkiG9w0BAQsFAAOCAQEAEVQ72z3RIHhF46ZzvhLTQuoO
7zUsrabZ8WlIc6XpAa/5qC6D4zf+yUXHNVYKVOlvGPfRCiwi31m9Mw4seKEBLD3+
6fViDHm+tTr0MbPWVnNYXa2KaQQETXjLmAS1l6Ao3U+jpG7lzuzytMCo5kJwu1EY
zQSoChB0LlTuYy/T4vNrt7L/fgRdnYkKPcbw6K29MvHpmNapTGreXqTlL51FLA6e
X2PPYpqL67HN1kX41+bFJkN+ySz0VhYgWZRMxD2BrnvPouYfBydTCaqHnToeiDlL
wWJFVAYgQEjwEOlXrExG6tg1hKRS47mco85xW5Yd2nWZOQ33whOsfxe8MGmhpA==
-----END CERTIFICATE-----