Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e203530303538.roa
File:                     32332e3133332e382e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          Enkid4Rgw1kdGmW/pn8rj94Mz0QSac9zCQAVvkTFQ7c=
Subject key identifier:   CC:A1:28:F6:C3:97:A4:B7:0B:80:81:4E:67:AC:C9:95:D3:4B:48:9F
Certificate issuer:       /CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
Certificate serial:       1A300C23753CE95353FD9EB80A112E0DF48644C9
Authority key identifier: 5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e203530303538.roa
Signing time:             Tue 21 Jun 2022 18:31:29 +0000
ROA not before:           Tue 21 Jun 2022 18:26:29 +0000
ROA not after:            Tue 20 Jun 2023 18:31:29 +0000
asID:                     50058
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:0c:23:75:3c:e9:53:53:fd:9e:b8:0a:11:2e:0d:f4:86:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
        Validity
            Not Before: Jun 21 18:26:29 2022 GMT
            Not After : Jun 20 18:31:29 2023 GMT
        Subject: CN=CCA128F6C397A4B70B80814E67ACC995D34B489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:44:f8:e2:b1:2d:72:78:eb:c2:21:39:a4:
                    12:a1:fa:89:41:c8:07:b2:f2:8d:6d:84:b9:de:26:
                    a0:79:40:15:a6:41:75:9d:0a:fc:ec:f8:6e:6b:16:
                    f2:5e:ab:45:ad:2e:98:de:ef:af:3c:03:48:de:c9:
                    68:00:81:06:9f:51:59:57:19:d4:f8:c5:15:d6:46:
                    e4:50:f9:40:ea:a6:12:76:47:81:26:80:a0:46:fc:
                    92:62:da:ce:ea:4a:fd:5a:0b:37:b8:21:27:af:92:
                    58:a2:8e:1f:2d:9a:89:0d:83:06:05:7c:04:c9:d7:
                    3b:f9:26:50:7c:33:99:40:cb:1f:f3:ee:aa:e9:e7:
                    dc:26:b5:fe:41:0f:08:4b:16:27:c0:c1:76:fc:37:
                    51:c5:d6:c5:d8:82:4f:3e:99:71:ce:a9:75:01:ba:
                    04:a5:a3:e2:99:0b:f7:96:51:3e:fe:c6:b4:8d:65:
                    39:e2:0a:15:e8:e5:a2:74:da:8c:e9:20:ee:b0:c1:
                    8f:26:64:c8:6b:bb:02:ba:42:1a:c1:01:fe:62:e1:
                    0f:42:47:e8:df:75:01:52:43:be:60:62:01:cc:14:
                    8d:82:fe:61:93:56:47:98:d7:33:8a:db:90:61:1a:
                    06:69:21:04:60:54:bd:15:49:84:af:09:fc:09:4e:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:28:F6:C3:97:A4:B7:0B:80:81:4E:67:AC:C9:95:D3:4B:48:9F
            X509v3 Authority Key Identifier:
                keyid:5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/9/5E6C5798EB917BF45568B24B358FDEE7E96EB13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/9/32332e3133332e382e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:32:a5:c3:a0:49:69:a6:c8:3c:c4:af:64:93:bc:0b:0d:8e:
         e8:ad:9f:54:b0:3f:e7:a3:a2:71:f4:ef:97:47:16:86:be:3c:
         96:7a:43:9f:d0:0a:8d:33:27:46:4b:e4:7d:ef:f5:fc:57:cf:
         9f:cf:3e:67:cc:b0:7e:e9:b1:fb:53:21:42:10:df:3f:cd:d1:
         1a:f7:2b:9f:29:6f:5a:2b:04:bd:c3:f6:74:30:28:b5:97:9f:
         da:64:99:fa:3a:af:84:77:dd:b4:a8:76:7f:62:84:24:1b:53:
         07:b6:49:8a:37:68:79:44:36:1c:69:6c:97:80:f7:8e:1b:0c:
         4c:d9:78:e1:db:37:dd:b2:74:32:67:eb:b7:80:1e:f6:0a:f5:
         6f:00:85:ee:5c:ff:b2:b4:c1:df:bd:e1:99:f1:f9:b6:f0:0f:
         36:22:5c:0a:3d:4c:01:67:1f:89:97:7e:4a:2e:33:bc:4a:3f:
         8b:bf:3f:89:c5:49:b3:cc:3c:f4:06:a4:3c:3d:bf:27:75:2a:
         1e:00:5c:98:48:f5:0a:f4:ce:cd:9b:02:09:2c:5c:f6:61:10:
         5e:28:d9:3e:0d:ce:58:6c:33:7d:0f:c0:4a:d7:3a:d0:c6:02:
         94:d3:06:47:e0:3b:64:53:e8:60:74:ef:3d:64:73:7a:63:61:
         11:f2:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----