Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/yo8lAXC5wvdrU584ThZQiVY_Tzg.roa
File:                     yo8lAXC5wvdrU584ThZQiVY_Tzg.roa (raw, json)
Hash identifier:          8vg7gH2kKWvKBBnDBPO8v7SsrQ0k+SobQtewJ4aKVbQ=
Subject key identifier:   CA:8F:25:01:70:B9:C2:F7:6B:53:9F:38:4E:16:50:89:56:3F:4F:38
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0E41
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yo8lAXC5wvdrU584ThZQiVY_Tzg.roa
Signing time:             Wed 29 Sep 2021 02:40:09 +0000
ROA not before:           Wed 29 Sep 2021 02:40:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131142
IP address blocks:        2404:0:7000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3649 (0xe41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:40:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CA8F250170B9C2F76B539F384E165089563F4F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:c9:20:ef:8a:86:8c:22:14:4e:51:f7:13:
                    51:f5:bf:8a:05:2a:de:46:88:f9:02:cb:ea:65:b9:
                    11:01:6e:f8:97:96:7b:9a:71:c9:df:58:78:f9:d9:
                    bf:88:36:02:f8:fa:9e:b5:44:3b:10:e4:23:9c:ee:
                    aa:65:f0:6e:b2:f1:d4:80:a5:97:a3:bd:71:c1:88:
                    b9:3b:c7:9f:e6:46:06:d6:fc:ea:7d:93:6c:b1:b6:
                    67:11:57:74:12:36:8c:bb:6e:4b:65:db:13:b6:39:
                    58:bd:87:b0:d6:ce:90:71:0e:b8:05:71:6f:1c:d6:
                    33:f6:a1:fa:73:e6:31:3f:f5:3d:21:38:b8:db:81:
                    63:80:05:81:c4:c9:b9:b3:84:3e:7b:be:62:fa:98:
                    ee:94:e1:33:9a:25:57:0a:ea:1a:e8:84:1d:34:2d:
                    fb:9f:94:20:3b:39:4b:ef:b0:ad:44:22:54:bd:d5:
                    11:a3:45:c9:ea:9e:43:9b:2b:88:16:ec:a1:73:c1:
                    48:a3:52:2a:00:3b:ff:82:28:62:b7:cb:9e:9e:fb:
                    48:24:c8:60:6b:52:89:b5:11:a4:a0:de:a3:60:57:
                    3a:b5:20:33:a3:49:c4:42:34:fc:0f:7b:b0:35:1b:
                    50:ce:f9:f4:b8:ed:00:5c:8a:8e:e2:b1:bb:bd:ec:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:25:01:70:B9:C2:F7:6B:53:9F:38:4E:16:50:89:56:3F:4F:38
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yo8lAXC5wvdrU584ThZQiVY_Tzg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:2e:d8:4a:29:64:e3:ec:38:77:9a:7e:dd:43:0e:cf:c3:92:
         b0:46:6c:ed:f6:1e:e9:1e:fb:ee:69:9e:b6:3d:79:03:35:d2:
         75:a4:ca:85:c2:e2:30:a5:57:bf:ba:ec:09:53:bc:7b:70:02:
         31:c4:1c:ce:24:a8:3e:dd:17:be:1d:14:0b:12:7e:09:e2:98:
         48:4c:6a:25:5a:d1:a4:b1:c3:12:dc:3f:09:3a:b1:5a:11:c9:
         f6:b0:e6:ce:ee:fa:31:b2:93:bc:f3:6b:74:8c:66:e3:70:53:
         b0:0c:34:7e:3d:63:b3:ec:01:2d:83:3b:4d:d4:27:57:94:6e:
         72:71:92:93:89:ae:19:aa:f2:31:49:1d:55:f3:d6:e6:b4:9a:
         a5:b2:de:84:84:6f:d4:22:db:af:cc:af:4c:42:19:80:46:2a:
         d7:23:a1:cb:76:07:dd:3f:2d:8d:7c:96:0a:d7:06:b7:11:ba:
         78:d6:ad:2b:f4:1b:19:6e:7e:0b:b9:68:69:f1:8c:d7:68:a2:
         2f:90:db:94:f4:6d:70:49:db:cd:59:2c:dd:35:4b:9e:6f:de:
         8f:f3:6f:64:ce:c7:ec:6e:49:e6:e6:05:cd:07:74:44:d3:3b:
         8d:52:bd:5e:42:1a:83:ff:9c:59:64:95:d2:2d:4a:c0:35:56:
         c9:1e:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----