Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/zXMTJfubHp_z6LyhC7HOhm6MTTw.roa
File:                     zXMTJfubHp_z6LyhC7HOhm6MTTw.roa (raw, json)
Hash identifier:          eMcuu7HGwm7jJu30f4Hix4jQbY869AtJAbSVqfxAjtM=
Subject key identifier:   CD:73:13:25:FB:9B:1E:9F:F3:E8:BC:A1:0B:B1:CE:86:6E:8C:4D:3C
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0DD0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zXMTJfubHp_z6LyhC7HOhm6MTTw.roa
Signing time:             Wed 29 Sep 2021 02:39:36 +0000
ROA not before:           Wed 29 Sep 2021 02:39:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131142
IP address blocks:        210.200.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:39:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CD731325FB9B1E9FF3E8BCA10BB1CE866E8C4D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:4b:c4:6e:ac:8b:20:50:76:de:b4:66:5c:
                    0f:6c:c9:71:f3:70:67:7c:56:ac:c1:83:ea:38:09:
                    2a:e3:e7:de:c0:6f:4e:50:7a:b1:75:9c:94:ce:2e:
                    45:14:2a:1b:39:cc:3e:19:83:e0:fc:ff:02:d2:c6:
                    d8:d6:45:67:bd:e7:0d:e7:f1:9c:de:f9:16:38:ae:
                    a3:bd:c6:bc:07:9d:59:19:73:86:6d:62:73:79:93:
                    2e:c6:99:2c:8e:64:8b:1c:87:b8:de:0f:9e:eb:f9:
                    62:95:77:cc:3e:a9:56:d5:9a:54:51:93:d4:a9:01:
                    3f:f4:5c:ca:df:66:b7:fd:53:77:2e:c2:5f:b2:14:
                    eb:1f:84:52:18:6f:9d:70:84:05:38:a8:7c:6c:bc:
                    37:d1:8a:e3:8a:31:1c:89:6d:fa:64:e7:3e:13:2f:
                    e3:7e:a1:de:93:75:06:8d:c6:21:f0:fc:35:64:5b:
                    ae:f8:e6:8f:c4:82:7c:b0:df:56:77:77:b3:3a:80:
                    bf:f7:9a:92:fc:06:6b:03:ed:5d:36:f7:36:2a:b1:
                    60:73:e0:ff:ca:f3:2f:73:a3:f2:6f:4c:04:ee:5a:
                    f9:38:f8:63:bf:6b:75:cc:08:5f:53:60:1b:f4:e8:
                    04:51:a9:4b:fd:34:29:af:a4:76:ed:b0:3c:80:de:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:73:13:25:FB:9B:1E:9F:F3:E8:BC:A1:0B:B1:CE:86:6E:8C:4D:3C
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zXMTJfubHp_z6LyhC7HOhm6MTTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:2d:ee:03:1f:5f:50:13:8b:fa:4e:2e:75:ed:7f:2e:37:
         2b:f1:9d:39:3e:ab:dc:43:e1:2d:a9:5d:33:4f:f0:fb:35:4f:
         7f:1a:85:c6:e2:6e:6b:ec:bb:07:93:57:af:46:b9:5a:61:20:
         ac:75:1b:cc:c5:c1:11:98:50:9f:d7:46:0e:7c:c5:e0:0a:6b:
         a4:f3:41:b9:4f:50:02:9e:e7:1b:d6:d3:12:94:19:3f:5b:a9:
         43:d5:c7:c2:51:db:95:78:29:08:7d:63:88:0c:ff:cc:2d:dd:
         68:f5:63:45:28:e7:a2:af:3a:ac:7e:e2:85:20:a4:f1:61:34:
         91:17:3f:04:c5:10:74:3b:95:dc:6c:52:d4:7b:a1:82:54:dd:
         f0:d0:fc:83:32:18:d4:ec:7b:a5:14:6e:5d:e6:2b:5d:ab:32:
         47:a6:e3:d6:da:51:13:5d:ff:0e:10:72:4d:6d:17:6b:4d:4e:
         e8:95:b5:e5:cd:bf:a6:6b:db:6f:b1:4d:18:09:72:0c:c7:2e:
         7c:53:97:11:27:64:bb:7c:a7:95:8d:19:45:43:80:49:7e:9f:
         65:e0:a1:ce:b5:b1:54:fa:9f:54:f7:50:75:97:e7:d8:ea:2a:
         f0:e9:cc:0f:48:8b:42:e6:e5:a7:36:75:b4:0b:98:14:e8:73:
         94:74:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----