Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wRzkl977btX3byv5_gx68ehRCZk.roa
File:                     wRzkl977btX3byv5_gx68ehRCZk.roa (raw, json)
Hash identifier:          t9KdqyarZhNFBksq7AxIvea5orOnDIMJiqKW+9pY5Ws=
Subject key identifier:   C1:1C:E4:97:DE:FB:6E:D5:F7:6F:2B:F9:FE:0C:7A:F1:E8:51:09:99
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       12D1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wRzkl977btX3byv5_gx68ehRCZk.roa
Signing time:             Fri 01 Sep 2023 08:05:02 +0000
ROA not before:           Fri 01 Sep 2023 08:05:02 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        2404::/26 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4817 (0x12d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep  1 08:05:02 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C11CE497DEFB6ED5F76F2BF9FE0C7AF1E8510999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:8f:9a:ea:37:f2:04:7c:8c:70:74:ac:f8:
                    80:bc:bd:71:35:7b:79:f3:b9:59:67:00:42:db:c6:
                    ff:43:fe:44:60:41:fb:6c:b3:b5:ab:01:00:75:95:
                    50:95:c7:89:c7:10:b7:b7:3f:b9:f9:57:f1:b5:17:
                    3d:e1:d2:9e:02:9a:ea:64:21:23:f7:49:af:53:b1:
                    b9:f6:58:4e:2d:45:e1:95:c9:b4:be:fe:3c:b3:c8:
                    80:ab:42:f5:3e:0b:e3:2f:0b:ae:65:71:7c:99:82:
                    a5:1b:01:99:4a:b6:42:78:6c:d2:74:3f:83:0b:eb:
                    19:73:99:09:c7:2c:36:f5:d1:9c:69:54:07:00:ac:
                    a4:ec:73:bf:d2:97:a4:7c:d6:d4:63:7e:43:99:51:
                    99:6c:9c:83:db:90:8c:c6:d7:0a:93:da:ef:ff:d7:
                    3a:6e:da:45:01:74:5d:cf:a7:a6:b3:93:f3:59:70:
                    a1:16:8b:78:30:a1:4b:b1:e0:60:95:51:78:dd:a1:
                    88:54:09:89:55:56:4a:f2:13:72:54:d6:0d:94:16:
                    be:17:36:c8:d4:57:03:6f:56:77:c5:ad:ef:5a:0b:
                    36:ff:27:69:42:0d:3e:64:81:5c:66:f1:9c:a0:bd:
                    ce:52:07:3a:f0:8f:03:1f:7c:61:c4:1d:a4:3b:2e:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:E4:97:DE:FB:6E:D5:F7:6F:2B:F9:FE:0C:7A:F1:E8:51:09:99
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wRzkl977btX3byv5_gx68ehRCZk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404::/26

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:db:f3:fa:eb:49:f4:bd:81:68:cb:f3:8e:99:3b:c6:0a:
         68:6f:dd:09:dd:4e:4a:87:ec:7f:35:77:6f:eb:28:0a:ba:e5:
         e4:04:58:af:10:9a:35:ef:5a:a6:31:29:84:ac:04:8c:84:b4:
         06:4f:5d:14:bf:b4:99:e9:44:05:a2:01:45:91:97:b7:41:62:
         89:bd:a8:d2:b7:2b:2e:7b:bb:51:37:33:f9:9c:23:c8:59:ce:
         e7:46:99:68:8a:fe:9c:b2:97:4c:42:ef:74:c0:81:ba:c2:90:
         78:8d:a1:73:f0:bc:ac:7d:f9:47:88:d9:9d:fa:29:cb:cc:65:
         b1:dd:65:86:c2:26:c9:6a:4e:ad:8f:25:bc:0a:39:cb:36:79:
         b9:c8:a4:37:e5:73:ee:8b:f6:0b:11:3a:2a:b3:51:e6:f3:44:
         9b:a6:bd:83:dd:c1:e0:0a:9a:4c:0a:00:24:a0:3e:39:1b:95:
         ef:ec:5a:67:92:09:ee:9a:cd:5f:3a:95:bc:3e:2e:8f:41:68:
         2c:fe:f3:6d:27:af:8f:45:9d:4d:41:6f:8f:01:ca:52:7b:c0:
         67:e8:52:d0:fe:26:07:a9:b7:3e:f1:16:e9:b2:5d:ff:45:af:
         91:3d:79:db:01:50:3b:3b:a0:12:a0:18:c7:f5:3e:21:98:6b:
         e6:ff:e4:50
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICEtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMxMUNFNDk3REVGQjZF
RDVGNzZGMkJGOUZFMEM3QUYxRTg1MTA5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGao+a6jfyBHyMcHSs+IC8vXE1e3nzuVlnAELbxv9D/kRgQfts
s7WrAQB1lVCVx4nHELe3P7n5V/G1Fz3h0p4CmupkISP3Sa9Tsbn2WE4tReGVybS+
/jyzyICrQvU+C+MvC65lcXyZgqUbAZlKtkJ4bNJ0P4ML6xlzmQnHLDb10ZxpVAcA
rKTsc7/Sl6R81tRjfkOZUZlsnIPbkIzG1wqT2u//1zpu2kUBdF3Pp6azk/NZcKEW
i3gwoUux4GCVUXjdoYhUCYlVVkryE3JU1g2UFr4XNsjUVwNvVnfFre9aCzb/J2lC
DT5kgVxm8Zygvc5SBzrwjwMffGHEHaQ7LmN3AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUwRzkl977btX3byv5/gx68ehRCZkwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvd1J6a2w5NzdidFgzYnl2NV9neDY4
ZWhSQ1prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBiQEAAAw
DQYJKoZIhvcNAQELBQADggEBAEyD2/P660n0vYFoy/OOmTvGCmhv3QndTkqH7H81
d2/rKAq65eQEWK8QmjXvWqYxKYSsBIyEtAZPXRS/tJnpRAWiAUWRl7dBYom9qNK3
Ky57u1E3M/mcI8hZzudGmWiK/pyyl0xC73TAgbrCkHiNoXPwvKx9+UeI2Z36KcvM
ZbHdZYbCJslqTq2PJbwKOcs2ebnIpDflc+6L9gsROiqzUebzRJumvYPdweAKmkwK
ACSgPjkble/sWmeSCe6azV86lbw+Lo9BaCz+820nr49FnU1Bb48BylJ7wGfoUtD+
Jgeptz7xFumyXf9Fr5E9edsBUDs7oBKgGMf1PiGYa+b/5FA=
-----END CERTIFICATE-----