Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/WHFalQoJMoZUBR8XRrNJbFmzAds.roa
File:                     WHFalQoJMoZUBR8XRrNJbFmzAds.roa (raw, json)
Hash identifier:          RD6uz5jZ0qtev49cCl4vRx2+2aty0Oev6SZJ7LdUajE=
Subject key identifier:   58:71:5A:95:0A:09:32:86:54:05:1F:17:46:B3:49:6C:59:B3:01:DB
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       0B31
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/WHFalQoJMoZUBR8XRrNJbFmzAds.roa
Signing time:             Fri 01 Sep 2023 08:05:54 +0000
ROA not before:           Fri 01 Sep 2023 08:05:54 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24167
IP address blocks:        2400:4500:0:2::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Sep  1 08:05:54 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=58715A950A09328654051F1746B3496C59B301DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:30:c0:ec:89:70:a6:07:1c:a8:ab:c0:63:
                    85:68:22:ed:29:f2:1c:c5:77:0d:75:e3:f1:11:12:
                    0b:0b:4f:7a:06:70:89:62:4e:9f:36:7f:6f:f9:f8:
                    fe:e3:25:80:30:b7:37:b3:18:71:2a:02:65:25:47:
                    19:0a:be:5c:7f:d2:f8:8f:43:16:55:9a:e7:7f:62:
                    08:e5:75:d6:20:9a:b1:5d:df:69:fd:a0:17:fe:16:
                    2c:dc:89:0e:79:0e:a9:f7:11:ea:ae:84:aa:af:1a:
                    82:56:00:f1:12:24:26:c7:75:0f:86:f3:6b:01:7a:
                    9b:22:52:ef:92:c4:2d:7f:44:b3:44:62:03:01:ab:
                    fb:3a:e9:e3:f9:80:5c:1f:6e:2d:c2:4d:4b:a3:c1:
                    b8:4a:85:40:6b:a6:12:39:10:7b:d0:c7:e5:24:ca:
                    d2:cd:6b:44:a6:27:73:66:ea:a0:4e:ff:4c:58:61:
                    01:6c:a1:49:4e:7e:fb:00:95:46:59:f6:16:bf:3e:
                    c1:0a:49:35:40:69:b8:4d:c9:06:13:0f:d0:ab:77:
                    c9:97:f3:0b:8d:01:39:db:cf:8c:e7:34:71:6f:32:
                    1f:07:22:0f:5c:b7:5c:16:34:e3:a8:0a:0d:67:b6:
                    bb:f1:12:3a:5e:82:5c:b8:31:81:e5:a3:63:71:11:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:5A:95:0A:09:32:86:54:05:1F:17:46:B3:49:6C:59:B3:01:DB
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/WHFalQoJMoZUBR8XRrNJbFmzAds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4500:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:dc:fc:62:28:8a:11:79:a1:6c:39:8d:c9:b5:be:f0:b0:
         63:ce:2b:db:ed:27:9b:dc:1b:8b:87:c4:2b:b2:bd:a1:6f:4d:
         8c:71:ea:c4:13:f8:3e:3c:60:79:83:db:5f:cb:35:45:37:fd:
         70:f4:a3:19:68:33:bd:2a:28:2f:c2:67:12:fe:96:a8:37:47:
         d8:bd:8e:5d:f4:67:3a:00:2e:cb:3c:36:1f:32:d3:b9:e9:82:
         bd:a6:9c:8a:db:0c:cf:bf:e9:f2:c4:b6:74:b1:57:cb:0c:a2:
         f9:7e:62:5b:da:ef:8f:03:f1:bc:fc:e5:a9:e0:b3:cd:b2:61:
         67:bd:f8:c9:12:77:ea:54:a8:fc:93:ac:a6:c2:2a:c4:eb:1e:
         3a:d4:a5:c1:a9:7c:56:81:10:70:e4:18:32:4a:fd:87:f6:3a:
         07:5f:cf:f3:51:3f:34:d3:26:7d:83:0b:aa:a4:61:5c:9a:b8:
         44:80:25:80:3c:97:40:28:34:78:20:96:9f:8a:77:83:bb:28:
         b3:79:28:2c:47:52:19:6a:e8:2e:14:54:6a:f1:af:c4:07:f1:
         8c:d1:f3:4d:6f:2a:96:20:ac:3d:1c:fc:46:96:1a:08:b3:c3:
         2a:2a:1e:7c:46:17:22:14:30:82:de:47:f0:4f:63:2c:47:81:
         44:80:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----