Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/s9MYriNrjGgvy6xb5xlPq7Y88Rw.roa
File:                     s9MYriNrjGgvy6xb5xlPq7Y88Rw.roa (raw, json)
Hash identifier:          813HOvEs8WMI0qTEE8Z1sLKlajKud0+AS19ThD5p4Y4=
Subject key identifier:   B3:D3:18:AE:23:6B:8C:68:2F:CB:AC:5B:E7:19:4F:AB:B6:3C:F1:1C
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       109C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/s9MYriNrjGgvy6xb5xlPq7Y88Rw.roa
Signing time:             Tue 16 May 2023 08:36:23 +0000
ROA not before:           Tue 16 May 2023 08:36:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17709
IP address blocks:        60.244.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4252 (0x109c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: May 16 08:36:23 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B3D318AE236B8C682FCBAC5BE7194FABB63CF11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:81:3f:41:cf:98:26:dd:61:5d:22:3a:16:
                    a1:a7:c0:33:73:89:cd:78:05:d9:98:54:2d:89:68:
                    22:e8:1d:c5:c9:19:a8:dd:9e:75:35:0c:f0:e2:7d:
                    dd:09:11:60:c3:2f:0c:bd:f7:e9:98:e9:c9:f2:59:
                    fa:26:b3:12:28:c2:54:6c:2a:91:3c:ac:fa:dc:a8:
                    f1:cb:d6:d6:9f:7f:5d:ee:aa:a0:5e:71:31:4b:26:
                    07:00:90:d3:5a:38:50:58:ca:b9:f8:f4:05:83:14:
                    5e:78:3d:a2:dc:ee:3c:e3:5b:46:ad:7e:53:28:c7:
                    4e:2b:d3:c4:4b:b6:ca:6b:b5:7c:e7:33:5b:4b:97:
                    34:42:b9:f7:d5:4d:4a:69:af:78:e3:c3:e5:83:d9:
                    44:b2:3b:a4:d6:01:a9:c9:e4:d9:8c:51:ba:07:6e:
                    71:8e:df:1a:d8:1f:d4:dd:32:55:2f:49:61:e9:e9:
                    87:73:93:61:e8:24:9f:93:a9:a9:19:25:6a:9f:c5:
                    64:1c:06:0c:a2:73:2c:95:2a:37:1a:89:be:8f:aa:
                    7d:0d:9e:dd:d8:61:f2:46:7b:d8:7e:2a:8c:ff:a9:
                    97:06:ee:50:56:b7:a0:83:c1:5d:fe:6d:bc:ef:81:
                    c2:bc:88:42:e4:71:bf:e1:cb:66:19:21:22:74:5d:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:18:AE:23:6B:8C:68:2F:CB:AC:5B:E7:19:4F:AB:B6:3C:F1:1C
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/s9MYriNrjGgvy6xb5xlPq7Y88Rw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         be:45:d2:c7:d7:e0:d3:71:4f:69:4b:56:ac:c1:1e:4c:82:64:
         dd:ad:8b:c8:dd:0d:ec:bf:3a:d4:7f:b0:4c:c4:a4:fa:94:be:
         c9:de:b0:35:d0:1c:c2:0e:38:cd:7e:ca:78:18:10:b7:8e:17:
         e3:0e:3a:32:7c:e1:a7:9c:a3:68:f1:e1:d3:08:a6:f9:93:a6:
         3e:df:42:30:fd:f8:37:61:0c:47:f5:3c:64:d1:3f:42:15:a7:
         42:c9:4a:e0:da:77:9f:6a:5d:50:29:ca:80:db:fa:77:45:82:
         31:9f:8b:ae:71:63:14:0c:8b:e4:b9:dd:fe:46:a9:8f:df:6f:
         bb:fa:98:99:36:75:58:22:61:0e:82:96:0b:01:6c:c7:c9:c4:
         71:37:c3:23:14:0c:fb:6d:4b:a8:29:ad:f0:c0:c3:3e:71:5c:
         21:0b:b8:ec:ec:9c:a8:2e:d0:e2:c8:67:78:31:9d:14:f7:72:
         aa:b7:c7:10:78:06:ec:86:9d:49:5b:58:66:b5:68:fe:a6:cd:
         c5:2e:e2:92:31:fb:fb:1b:ef:8f:e0:64:9f:45:d9:5d:2a:11:
         7c:e4:23:f7:fb:ad:cc:2f:c1:44:65:2a:f3:05:e1:5e:89:42:
         c0:64:9c:39:97:cb:36:8b:f3:ee:dc:a3:1b:ab:6d:0e:71:59:
         77:a3:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----