Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Ft5w2JPl74-H7NFAhpL9yRNfjQg.roa
File:                     Ft5w2JPl74-H7NFAhpL9yRNfjQg.roa (raw, json)
Hash identifier:          VeXKvhWFzh/z0r5nEdWxnOfN6QCQq4hWRRZ5pQsXF6g=
Subject key identifier:   16:DE:70:D8:93:E5:EF:8F:87:EC:D1:40:86:92:FD:C9:13:5F:8D:08
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       109A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ft5w2JPl74-H7NFAhpL9yRNfjQg.roa
Signing time:             Tue 16 May 2023 08:36:23 +0000
ROA not before:           Tue 16 May 2023 08:36:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17709
IP address blocks:        2404::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4250 (0x109a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: May 16 08:36:23 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=16DE70D893E5EF8F87ECD1408692FDC9135F8D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:79:92:5b:80:42:ad:f6:7f:0a:e9:19:11:
                    84:29:a7:a8:9f:44:4b:36:db:db:1c:5a:bb:15:da:
                    11:b0:ad:b4:a8:8d:eb:8a:1e:d0:68:b3:68:c9:66:
                    f8:31:1c:8c:f7:88:52:45:74:87:00:dc:be:42:9f:
                    55:7e:9d:10:b5:63:c8:06:b3:3f:d0:87:7f:69:15:
                    4d:38:49:f7:f5:d2:65:77:55:a4:58:20:03:28:db:
                    af:56:2f:e3:e6:a0:05:23:a1:ab:91:11:3b:0e:84:
                    48:b1:2b:e0:00:ca:5a:53:f0:0d:61:c1:fb:4b:e1:
                    96:a0:7a:01:22:d2:1e:c3:0b:9e:6a:ea:c2:51:94:
                    c4:9e:21:71:a4:84:a3:8e:df:18:74:3b:65:d8:58:
                    ae:a7:73:53:10:5f:0c:60:0b:1e:48:7c:5f:8b:df:
                    77:4c:05:53:ad:ce:e6:ae:f4:9b:07:4a:a4:5c:30:
                    1f:51:b9:eb:04:dd:d1:b8:13:d8:5d:c6:5b:53:ae:
                    ad:89:f2:b5:1c:d6:13:d6:29:d5:6c:8c:2e:fa:16:
                    a6:a6:7b:54:8a:bd:e9:86:fa:d0:a3:b6:1d:84:6e:
                    82:93:c3:8a:d3:eb:91:59:cb:28:2a:f2:92:a9:91:
                    5b:03:57:db:b8:7f:2b:06:41:3a:95:0a:22:7f:d3:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:70:D8:93:E5:EF:8F:87:EC:D1:40:86:92:FD:C9:13:5F:8D:08
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ft5w2JPl74-H7NFAhpL9yRNfjQg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:3a:df:52:6a:be:67:15:75:16:79:34:26:3d:46:a6:3d:
         62:15:f6:a6:84:b9:55:66:db:71:e6:90:ab:94:44:d9:63:57:
         0f:74:f2:f3:b7:0a:2b:6c:7a:bf:2c:84:2c:01:37:26:bd:ee:
         55:5c:fc:eb:97:0f:89:27:4c:00:38:0b:fa:af:5c:61:04:e8:
         bc:f6:64:dc:49:f5:2d:62:d6:3a:56:30:da:71:c1:aa:bc:87:
         6a:34:25:e4:30:a9:dd:bb:75:21:f8:83:ae:1e:80:4a:cb:04:
         0a:80:68:f7:2e:dc:4e:bf:4c:6a:23:b2:a3:be:57:79:a9:e4:
         8a:63:f6:4a:4a:e7:1b:5b:40:63:09:a3:a4:a4:cd:0e:f1:0c:
         05:be:a0:e7:56:de:46:54:ae:90:35:45:7b:13:1f:6b:a4:35:
         5e:f7:72:5d:30:c5:e0:38:8a:fb:46:7f:b4:f2:2b:c6:af:a9:
         64:59:33:f2:7f:97:88:b5:d5:c6:d0:96:d5:76:bc:83:2d:5a:
         4d:ef:6b:e0:88:86:58:76:5f:49:2e:d6:f2:46:34:6a:11:20:
         8d:a0:69:41:b2:dc:0b:fe:a4:e4:d3:df:1d:67:ad:d5:9c:77:
         1b:c1:4f:ee:f4:b8:36:46:44:c0:08:51:ff:9e:55:b9:f6:67:
         94:2d:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----