Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/R8YjDQTkP7uxYlUIy4qHPyXPDSA.roa
File:                     R8YjDQTkP7uxYlUIy4qHPyXPDSA.roa (raw, json)
Hash identifier:          teg8ikHpzPUouYJiPewXLH2EDXyipbad4dYnzPx3fmI=
Subject key identifier:   47:C6:23:0D:04:E4:3F:BB:B1:62:55:08:CB:8A:87:3F:25:CF:0D:20
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0981
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/R8YjDQTkP7uxYlUIy4qHPyXPDSA.roa
Signing time:             Tue 29 Sep 2020 10:01:55 +0000
ROA not before:           Tue 29 Sep 2020 10:01:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        202.178.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433 (0x981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47C6230D04E43FBBB1625508CB8A873F25CF0D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:e7:66:62:1f:8a:e8:0c:0f:aa:d5:e7:b6:
                    7e:87:a6:39:4c:b9:da:1b:2d:25:d6:d2:ec:f2:27:
                    80:96:f1:7d:b6:61:e3:29:f4:76:b1:09:81:53:93:
                    56:a8:9e:4b:cd:25:2c:58:ca:37:b5:af:c9:87:d6:
                    6f:3c:b8:44:9f:93:fb:9c:e4:8a:ef:b3:79:96:d6:
                    90:5e:16:85:f5:6e:11:88:0b:7f:ac:df:05:76:2d:
                    9a:67:e3:8d:cf:1a:d1:0e:9d:66:50:27:60:69:d2:
                    56:3d:d6:ab:3c:c1:21:a4:70:be:9d:bd:5a:d7:4d:
                    a7:dc:7f:6f:6d:24:70:8c:5f:47:2e:78:ce:7b:4c:
                    5b:57:ee:8f:33:2c:73:2a:2b:3b:51:97:da:4e:24:
                    bf:32:87:6c:8f:ec:f3:0d:6e:ec:ba:55:f4:22:4f:
                    a7:7c:e7:d4:f1:8e:25:e9:f0:11:e4:b5:b7:5b:c7:
                    d1:74:25:a1:21:5f:8b:75:6f:9b:95:91:ca:9c:55:
                    1a:0f:66:e6:15:29:d4:be:65:d6:86:cd:96:b1:08:
                    94:3b:44:ed:63:8d:ca:ec:77:6c:4e:88:d9:24:9a:
                    a5:93:70:89:98:ee:95:30:95:bd:69:f5:f5:46:e1:
                    ea:e9:cf:b0:c1:00:f9:e3:3c:d5:0d:1b:cd:52:c8:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:23:0D:04:E4:3F:BB:B1:62:55:08:CB:8A:87:3F:25:CF:0D:20
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/R8YjDQTkP7uxYlUIy4qHPyXPDSA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:d6:17:b2:31:b7:d0:50:3e:d1:b5:52:00:5d:04:f7:30:
         81:b5:fc:3f:26:dd:d6:32:54:b5:81:af:4b:2a:50:db:9a:0a:
         50:6b:d7:08:4f:d5:0b:1c:b2:07:c8:3a:ac:7e:91:f3:2a:2a:
         19:60:7e:ee:53:60:8b:ab:d6:8f:27:d8:11:f9:b2:33:91:3e:
         0e:f9:1d:b5:1d:60:fa:fd:5d:36:59:e8:fb:97:8e:b9:42:c9:
         fb:fa:f8:cd:06:72:77:4b:89:1b:be:3f:a7:74:c1:de:bd:30:
         58:eb:2c:18:2d:99:3b:e8:46:71:46:81:fe:46:7c:d2:8a:8c:
         94:bf:bb:84:a5:49:24:5c:49:b8:4a:cc:f5:eb:84:e5:c0:0f:
         30:b8:70:d5:1f:95:f8:68:a0:c6:c6:65:8e:1a:ab:e9:6d:ec:
         f7:cd:d1:fe:e5:78:78:71:28:6f:a4:79:25:dc:8e:3b:4f:20:
         56:31:84:1c:3b:53:6f:40:0a:16:fb:52:19:75:72:bf:8c:46:
         f0:33:74:bc:96:28:c0:a5:55:40:69:db:fb:12:49:5f:7c:9e:
         44:d6:21:0b:14:5f:64:72:fa:a2:f6:ce:d7:05:3a:37:26:ac:
         bd:8a:51:7c:b7:d9:d2:0d:1a:d3:7c:14:74:c8:cb:06:c2:43:
         d5:3f:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----