Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/jsgLXx8zvBP_f5-qDiL_EBi3cIU.roa
File:                     jsgLXx8zvBP_f5-qDiL_EBi3cIU.roa (raw, json)
Hash identifier:          Sg/1P+/qLschLIxeQDOGg+37MeNCVoFXzBSjsskmYgo=
Subject key identifier:   8E:C8:0B:5F:1F:33:BC:13:FF:7F:9F:AA:0E:22:FF:10:18:B7:70:85
Certificate issuer:       /CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
Certificate serial:       0772
Authority key identifier: 54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/jsgLXx8zvBP_f5-qDiL_EBi3cIU.roa
Signing time:             Tue 29 Sep 2020 09:58:03 +0000
ROA not before:           Tue 29 Sep 2020 09:58:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9264
IP address blocks:        2403:c240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
        Validity
            Not Before: Sep 29 09:58:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8EC80B5F1F33BC13FF7F9FAA0E22FF1018B77085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:7f:51:36:ef:30:7f:7a:5b:b4:27:0f:08:
                    c1:3d:d7:e7:21:70:ca:06:3d:a7:68:f5:66:56:c2:
                    c5:0b:14:99:a2:6d:eb:fd:5e:60:69:09:7c:95:f3:
                    15:2d:39:ec:a9:9a:04:87:00:97:f3:e3:19:5e:83:
                    de:25:67:8f:7d:6e:46:8b:a5:5a:cc:29:8a:63:e0:
                    c6:e5:64:ad:32:a0:11:71:43:66:58:de:45:75:2c:
                    38:c7:67:92:79:b5:3c:a4:da:8f:6a:af:06:d9:9a:
                    3e:5f:fc:83:0c:18:19:13:52:aa:68:39:62:ae:2d:
                    5b:b9:00:64:af:9e:ec:86:ae:f3:5a:f1:cc:94:44:
                    e8:d5:37:47:37:2e:9d:1a:2c:a9:b1:b3:e7:69:ff:
                    29:1b:70:3e:71:0b:70:ab:b3:0f:02:64:3b:5d:12:
                    e7:67:6d:3a:47:dd:b0:a4:fb:5c:b8:5a:c8:f8:47:
                    5d:a9:69:6f:9b:94:a7:2e:17:75:5a:6a:72:72:25:
                    f6:57:40:4b:96:ba:0c:01:2c:76:1a:8b:cd:7e:04:
                    eb:22:1a:83:e6:05:11:e6:d6:e4:36:0d:5c:67:8a:
                    14:71:38:ec:6f:d3:ef:f3:9d:d6:15:65:52:e6:3e:
                    1d:5f:14:ae:17:7a:a6:ad:82:0e:22:4a:f3:a8:3f:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:0B:5F:1F:33:BC:13:FF:7F:9F:AA:0E:22:FF:10:18:B7:70:85
            X509v3 Authority Key Identifier:
                keyid:54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/jsgLXx8zvBP_f5-qDiL_EBi3cIU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c240::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:ca:62:09:d2:56:c4:98:cd:51:f0:2a:76:49:06:fa:39:
         86:e5:54:f2:8d:73:bb:b8:70:06:d6:4c:71:ef:9e:80:51:e3:
         d9:13:3b:7c:42:1c:60:61:2e:96:b1:7a:9b:e9:96:7d:be:18:
         45:83:cc:6d:2d:49:a7:09:de:34:08:c3:18:75:91:d1:dc:77:
         d0:e4:de:49:bf:b9:c9:75:39:d8:d1:d7:28:3c:31:3f:6c:91:
         fe:09:33:2c:7d:5f:c0:c6:62:8a:25:b1:62:e0:b7:b5:e8:2d:
         49:e1:37:55:88:2f:6d:09:86:ff:4a:57:10:4b:a5:b6:9c:ff:
         4d:df:0e:62:05:77:a6:76:89:9c:54:a5:63:40:27:6d:d4:fe:
         a5:e7:97:77:dc:52:d0:70:2c:f4:42:ce:cd:86:90:e9:4b:4e:
         96:2e:13:7a:f6:9e:50:b4:ad:c8:4e:57:63:a4:5d:94:a5:66:
         61:cd:1b:a7:69:6e:a7:5f:08:ec:61:12:fa:3c:c7:6a:f6:12:
         28:13:50:51:41:2b:ea:47:ab:d8:e5:26:c2:ac:f6:a3:28:87:
         a5:8f:08:10:47:57:69:46:4d:a2:f0:e6:9a:3d:d8:82:7b:9c:
         b2:c3:9a:77:85:04:5a:af:39:bf:d8:7d:0b:7c:96:a2:f6:87:
         9a:32:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----