Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/PsWDhaEedXAMhKDOBojbsJFnfNo.roa
File:                     PsWDhaEedXAMhKDOBojbsJFnfNo.roa (raw, json)
Hash identifier:          +7v4UE8DJVXi4DyhOFALH4M9Srfirt04hwYSduGHUbY=
Subject key identifier:   3E:C5:83:85:A1:1E:75:70:0C:84:A0:CE:06:88:DB:B0:91:67:7C:DA
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0E4B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PsWDhaEedXAMhKDOBojbsJFnfNo.roa
Signing time:             Wed 29 Sep 2021 02:40:12 +0000
ROA not before:           Wed 29 Sep 2021 02:40:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17709
IP address blocks:        2404::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:40:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3EC58385A11E75700C84A0CE0688DBB091677CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:01:5a:96:cb:fb:46:0e:e6:6d:92:0c:e2:
                    1c:0b:9f:32:09:bd:7f:d9:77:91:49:91:01:18:ff:
                    47:72:d5:bc:87:70:a3:62:ef:d9:aa:89:7e:64:11:
                    7e:0a:4b:2e:b6:23:73:5c:16:49:03:cd:3b:8f:7a:
                    b3:b8:ac:e7:6a:ad:5e:38:06:3e:41:32:66:08:96:
                    b3:4a:e4:ae:22:73:f0:a1:91:a9:2e:d7:b3:a9:ce:
                    f0:4d:1e:5d:2f:b3:13:32:9b:25:d0:a2:9e:b1:11:
                    60:d2:96:17:4a:1a:b6:dd:e9:95:02:0b:21:67:85:
                    37:6a:55:da:6a:33:24:4a:01:7a:ce:3b:c5:f2:0b:
                    0a:65:64:d3:a2:97:5f:e2:d0:a9:34:bd:82:cf:8b:
                    7e:36:7a:92:b1:36:7f:f0:c5:75:0c:d6:b6:bc:14:
                    b4:b0:54:d3:7f:19:d4:bf:c4:7f:f2:6a:1a:31:5f:
                    fe:eb:b6:86:a4:d6:27:89:03:5a:71:ae:07:17:b4:
                    be:72:6a:36:64:89:d1:28:10:56:6c:36:e6:43:21:
                    68:79:f5:75:37:47:ef:78:c0:0e:42:b7:57:b6:52:
                    c6:95:1f:f8:ad:cf:bc:25:5e:f0:af:ec:54:e2:57:
                    d4:3f:b4:6c:9e:09:3e:a1:be:56:e4:33:4c:35:33:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:83:85:A1:1E:75:70:0C:84:A0:CE:06:88:DB:B0:91:67:7C:DA
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PsWDhaEedXAMhKDOBojbsJFnfNo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:56:08:a0:6f:4a:96:2d:96:ce:66:2d:5e:51:e7:61:6d:c2:
         9c:cd:88:7d:7d:15:8e:4f:94:62:fc:bb:fa:39:5b:db:a9:ce:
         06:cf:5a:b2:24:66:20:8d:1a:f7:38:c6:8e:59:99:b6:e7:64:
         88:4e:6a:17:c8:d2:b9:10:c4:15:61:0c:3f:d5:4d:e5:d5:04:
         cb:b1:e5:bc:28:5b:11:99:35:d6:69:ee:85:19:b9:f1:05:fb:
         f8:3c:fb:9b:79:43:ae:f9:9d:7b:09:46:fe:8e:d9:60:27:55:
         7e:de:3e:f6:94:10:f8:37:9e:bc:2f:df:0a:c1:04:83:fc:f2:
         e9:f9:0a:c7:10:30:db:3a:33:61:4f:75:4e:60:0e:da:86:43:
         6f:bb:c0:fc:38:1a:bd:03:30:7f:0a:eb:d3:8e:eb:95:f3:5d:
         79:ac:f9:b1:bc:bb:ed:4e:39:9d:88:36:65:63:59:47:4b:ad:
         9a:ff:9d:f5:90:71:7f:53:c1:ff:42:f1:b6:a8:50:98:36:69:
         fb:7c:57:ad:eb:7a:d9:1a:36:d1:1e:42:b9:86:2b:e5:99:9c:
         89:b3:39:2b:79:cc:83:35:d8:9c:6e:b6:c8:09:7b:0f:97:98:
         c8:07:43:c4:c0:74:7e:a2:a1:18:a1:75:25:8b:ca:95:e1:f5:
         f6:62:5e:19
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjQwMTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNFQzU4Mzg1QTExRTc1
NzAwQzg0QTBDRTA2ODhEQkIwOTE2NzdDREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzMgFalsv7Rg7mbZIM4hwLnzIJvX/Zd5FJkQEY/0dy1byHcKNi
79mqiX5kEX4KSy62I3NcFkkDzTuPerO4rOdqrV44Bj5BMmYIlrNK5K4ic/Chkaku
17OpzvBNHl0vsxMymyXQop6xEWDSlhdKGrbd6ZUCCyFnhTdqVdpqMyRKAXrOO8Xy
CwplZNOil1/i0Kk0vYLPi342epKxNn/wxXUM1ra8FLSwVNN/GdS/xH/yahoxX/7r
toak1ieJA1pxrgcXtL5yajZkidEoEFZsNuZDIWh59XU3R+94wA5Ct1e2UsaVH/it
z7wlXvCv7FTiV9Q/tGyeCT6hvlbkM0w1M1JZAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUPsWDhaEedXAMhKDOBojbsJFnfNowHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUHNXRGhhRWVkWEFNaEtET0JvamJz
SkZuZk5vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQACVgigb0qWLZbOZi1eUedhbcKczYh9fRWOT5Ri
/Lv6OVvbqc4Gz1qyJGYgjRr3OMaOWZm252SITmoXyNK5EMQVYQw/1U3l1QTLseW8
KFsRmTXWae6FGbnxBfv4PPubeUOu+Z17CUb+jtlgJ1V+3j72lBD4N568L98KwQSD
/PLp+QrHEDDbOjNhT3VOYA7ahkNvu8D8OBq9AzB/CuvTjuuV8115rPmxvLvtTjmd
iDZlY1lHS62a/531kHF/U8H/QvG2qFCYNmn7fFet63rZGjbRHkK5hivlmZyJszkr
ecyDNdicbrbICXsPl5jIB0PEwHR+oqEYoXUli8qV4fX2Yl4Z
-----END CERTIFICATE-----