Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/RdB32I9Fs8u0aq9BHRhyZob7BsA.roa
File:                     RdB32I9Fs8u0aq9BHRhyZob7BsA.roa (raw, json)
Hash identifier:          j0ipN1iVHuCrAAzPXsHSioAI1e6T4/oDrtNZ04L3sQk=
Subject key identifier:   45:D0:77:D8:8F:45:B3:CB:B4:6A:AF:41:1D:18:72:66:86:FB:06:C0
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0908
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RdB32I9Fs8u0aq9BHRhyZob7BsA.roa
Signing time:             Tue 29 Sep 2020 10:01:23 +0000
ROA not before:           Tue 29 Sep 2020 10:01:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        2404::/26 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=45D077D88F45B3CBB46AAF411D18726686FB06C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:93:6d:f4:9c:81:07:e5:c2:77:74:17:66:
                    37:62:72:2c:3c:df:5c:dc:0f:fa:b3:d6:e4:8d:25:
                    44:82:c7:ef:85:2b:68:39:17:68:ed:88:4c:41:c0:
                    3e:3e:59:da:bf:df:4d:d7:a3:59:5e:46:e1:93:98:
                    ae:b1:22:18:43:ea:7a:aa:88:c8:7d:28:b1:e8:8b:
                    20:ff:6e:eb:58:97:0f:a3:1e:92:0f:06:5a:cc:36:
                    d5:a9:80:a5:49:0f:1f:73:97:ef:1c:35:33:a9:a4:
                    bc:b2:5d:d2:9d:cc:44:2a:16:c9:2a:19:79:d0:a5:
                    16:7e:7a:9d:d1:d7:0f:28:4a:e7:f7:29:c7:8c:d4:
                    a1:fa:95:95:83:67:0d:e4:fb:e4:b5:d6:cd:21:87:
                    1e:07:5b:3a:da:10:f6:7b:0d:d6:5a:f1:4b:a8:ac:
                    e9:55:58:42:a3:64:17:a6:13:d8:d1:79:8a:16:46:
                    0b:5c:b9:f1:13:51:9e:f4:c5:67:6a:84:56:0c:d2:
                    d6:9b:5f:6d:05:25:21:9d:0f:c5:53:d2:3d:e5:b0:
                    fd:2c:2e:8d:eb:34:1f:54:8e:09:78:d2:3e:22:c1:
                    d3:6d:c6:83:57:c1:b8:62:8c:ca:a9:67:9a:2a:a9:
                    b2:df:eb:87:b1:f2:2f:26:83:40:09:ab:da:1c:2c:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:77:D8:8F:45:B3:CB:B4:6A:AF:41:1D:18:72:66:86:FB:06:C0
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RdB32I9Fs8u0aq9BHRhyZob7BsA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/26

    Signature Algorithm: sha256WithRSAEncryption
         50:27:90:1f:74:12:d2:a8:7e:2e:90:da:a1:fc:05:a1:3c:0d:
         89:db:95:8d:dd:53:45:36:d8:c0:30:13:47:bc:d2:d4:85:47:
         c4:b2:67:da:56:d7:56:14:06:93:b9:2a:57:29:07:5f:b7:92:
         1d:9f:47:70:c5:1f:2a:1c:29:db:55:ef:3d:57:a7:30:08:0c:
         c1:3a:a8:87:59:2d:b3:c1:f3:b0:74:3f:38:7c:62:59:b6:db:
         83:3f:1b:f6:b1:3d:35:4a:91:34:cb:d4:3d:ef:c9:25:21:2b:
         fd:af:43:99:3e:40:9a:3a:5a:4e:58:86:e4:ab:bf:41:9f:be:
         8b:29:33:d6:50:23:3c:5e:5d:6d:c9:e8:92:72:0a:0a:51:66:
         64:dc:59:f1:eb:e6:d8:29:93:7f:12:a2:ab:d5:83:18:43:56:
         83:43:73:9d:d4:0b:86:e5:d5:fb:2f:f0:34:dc:ae:20:9e:f1:
         0b:f2:d7:29:13:ab:e0:fb:14:cb:17:90:a6:36:3f:05:be:13:
         12:5d:db:b5:eb:0e:83:5d:7c:c3:9b:7d:a4:49:81:f1:7b:89:
         29:5b:4f:86:fd:4e:97:f7:ca:13:b9:25:23:a6:b8:a3:dd:48:
         91:9e:d0:94:26:f1:00:4b:4f:10:67:03:91:cb:14:78:fd:8e:
         0d:3e:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----