Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Ln24lB9hGTGXp9JSkJivq1QmfOA.roa
File:                     Ln24lB9hGTGXp9JSkJivq1QmfOA.roa (raw, json)
Hash identifier:          bUhAWBbDh1IJZaHfGWlHwPF/PSVihv7a6IHMjdggqb8=
Subject key identifier:   2E:7D:B8:94:1F:61:19:31:97:A7:D2:52:90:98:AF:AB:54:26:7C:E0
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0980
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ln24lB9hGTGXp9JSkJivq1QmfOA.roa
Signing time:             Tue 29 Sep 2020 10:01:55 +0000
ROA not before:           Tue 29 Sep 2020 10:01:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        2404::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2E7DB8941F61193197A7D2529098AFAB54267CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:f8:4c:c9:0e:26:37:c8:c2:c2:7a:7e:0e:
                    83:c2:a2:7e:28:3e:81:11:fd:f4:61:14:53:44:40:
                    8a:03:c4:85:ed:5f:be:b1:b2:98:42:20:04:6d:98:
                    26:e1:06:dd:97:6f:b8:da:e9:6d:01:8a:4c:e2:4d:
                    c8:fb:ef:6c:8d:76:73:e9:3a:a2:c2:98:76:0c:5c:
                    e1:8e:48:e8:36:c1:8e:82:1d:73:e7:71:70:f2:d3:
                    aa:a9:e1:71:80:29:d4:6b:71:37:ba:f1:c8:84:0c:
                    bd:95:66:4f:86:0a:48:f2:8b:87:ba:31:ac:10:94:
                    74:93:ac:3f:7f:87:39:de:a4:62:3d:23:18:74:87:
                    87:63:59:20:cb:f4:a5:58:5e:99:74:b9:d9:6b:89:
                    40:a9:73:07:6d:0e:a8:61:5b:7d:a3:c1:81:27:ae:
                    f0:ed:e1:6e:41:6a:c4:28:58:8c:f8:d0:9b:94:5e:
                    1f:c0:43:1e:7f:6c:09:68:dc:87:bd:cb:0d:c2:3e:
                    63:45:39:36:43:36:49:e0:2b:3d:ee:3c:5a:bf:52:
                    23:9a:d6:5e:82:c8:75:a8:7c:d7:99:e2:51:d0:bf:
                    e8:52:ad:17:b9:aa:c1:0f:66:9e:68:c7:47:f7:4b:
                    ae:e3:e0:e7:5f:39:b2:8d:6d:b4:9d:76:51:79:63:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7D:B8:94:1F:61:19:31:97:A7:D2:52:90:98:AF:AB:54:26:7C:E0
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ln24lB9hGTGXp9JSkJivq1QmfOA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:22:9b:08:d0:52:d0:f3:2f:0b:20:6c:ad:02:a0:7c:8a:
         88:0c:2d:0f:d2:8d:3e:97:47:28:f0:c6:f6:59:4a:51:e7:7d:
         aa:30:37:85:fc:df:42:a1:fb:4e:98:1a:94:46:2f:20:62:25:
         6f:cf:ea:9f:bf:ab:0f:ca:73:f4:44:1c:fc:8b:cb:76:10:a2:
         f1:f1:75:e9:fd:0e:7f:c4:5a:9d:9e:3b:1f:4d:a4:e4:6b:d1:
         7e:c0:80:3f:93:07:90:03:3c:1c:2c:fd:42:81:19:d2:c1:0a:
         f7:5b:59:f7:f5:9a:5d:7e:f7:fd:b7:a9:b2:d6:be:4c:ec:8c:
         43:e6:ea:90:7b:2c:8f:bd:9e:2f:48:46:bd:e5:74:81:14:97:
         9b:c6:f0:e6:7a:3c:2d:04:b6:ce:3e:4d:bc:35:93:5e:63:c0:
         e0:d6:1b:8b:fb:8f:98:61:8f:ca:bb:1e:7c:0d:b8:08:55:95:
         c0:9c:c9:d4:33:c9:4f:b5:6b:39:2e:e7:e6:50:1d:dd:1c:3b:
         47:e2:c5:1a:fa:e1:98:db:86:a3:1d:56:57:e6:6a:0b:04:ab:
         d9:5a:f4:0c:59:bd:90:54:76:94:d9:4a:ee:56:2a:73:9d:fa:
         fb:a6:94:0c:80:3c:cf:c9:68:96:4b:3b:e8:0c:43:79:82:8f:
         23:a5:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----