Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/AhvqWSvzcddJKquVkAXAUfJ1G_Q.roa
File:                     AhvqWSvzcddJKquVkAXAUfJ1G_Q.roa (raw, json)
Hash identifier:          lGmSyu1aM9J7wgSxXLFWI0YOm5r0ZEz+CyFRcs+Lt7M=
Subject key identifier:   02:1B:EA:59:2B:F3:71:D7:49:2A:AB:95:90:05:C0:51:F2:75:1B:F4
Certificate issuer:       /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial:       F3
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/AhvqWSvzcddJKquVkAXAUfJ1G_Q.roa
Signing time:             Tue 21 Nov 2023 15:31:01 +0000
ROA not before:           Tue 21 Nov 2023 15:31:01 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        2400:c9e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
        Validity
            Not Before: Nov 21 15:31:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=021BEA592BF371D7492AAB959005C051F2751BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:5e:28:82:5e:1f:c6:73:d5:34:6a:25:cb:
                    de:91:a5:95:4d:a6:72:e8:47:b7:61:cc:ed:7b:14:
                    67:5b:0b:29:a4:12:0a:b3:15:62:8a:6d:0e:42:5f:
                    74:b6:7b:31:38:9f:ea:ef:31:cc:e4:ab:9b:54:d9:
                    0e:57:e5:bc:db:67:f7:33:45:ef:a8:78:3d:a1:2b:
                    f2:cd:ba:a6:91:34:08:84:cf:ed:23:b3:b6:57:14:
                    e2:d4:96:4b:06:90:54:c4:b4:37:b4:d1:b7:fe:10:
                    ca:b2:f7:fa:58:a9:37:a9:47:2e:ab:a3:76:d9:c4:
                    c4:1b:74:16:a6:d8:6d:76:b3:b9:4c:7c:69:86:f0:
                    15:53:f0:6e:7c:88:3c:f9:11:fd:2a:be:08:67:0a:
                    7b:b4:52:2b:47:de:3e:10:8d:f1:6a:82:a1:04:e4:
                    d3:87:f5:9b:74:41:58:01:94:dc:a8:09:d3:86:94:
                    82:09:be:d8:c8:f7:db:e4:6f:cb:16:20:46:7f:2e:
                    33:6f:cb:8c:a5:63:e4:d3:2a:c4:90:bb:1c:26:55:
                    c0:5e:82:8c:77:fc:ff:ca:e4:b9:e2:65:07:52:f8:
                    0f:ee:56:fc:b1:70:f0:b0:30:fa:b7:58:57:c1:a1:
                    13:3a:f9:35:0b:70:27:d1:d1:3e:fc:21:21:05:9c:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1B:EA:59:2B:F3:71:D7:49:2A:AB:95:90:05:C0:51:F2:75:1B:F4
            X509v3 Authority Key Identifier:
                keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/AhvqWSvzcddJKquVkAXAUfJ1G_Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:a4:1e:5f:e6:f4:49:bd:d7:e9:c3:56:69:1c:66:cf:53:
         75:36:d7:2a:fa:3e:a8:8b:a9:c4:32:a2:dd:8c:db:7f:6d:47:
         4d:bf:e7:43:2b:54:ba:07:01:f1:b7:61:4d:97:b2:1c:f5:f3:
         b4:90:7b:f1:42:00:cf:2b:36:b5:71:f6:27:3c:59:29:67:50:
         c5:d6:cf:0c:ec:60:03:15:0e:bf:da:8e:d8:aa:68:db:89:3d:
         cd:7d:7e:3c:ab:cb:45:fc:0f:88:66:59:9c:b9:e0:a5:64:95:
         13:03:04:3c:ef:6e:84:93:c1:81:ab:60:74:2b:0f:14:88:33:
         97:ae:11:3f:72:ab:f9:75:87:8c:ba:11:5d:85:d2:4b:e9:48:
         dd:86:9e:1b:88:19:ea:46:28:b1:61:bd:0e:67:e0:51:c6:88:
         17:b3:29:19:4c:4f:c2:66:fc:39:51:1a:79:7c:a4:b0:c9:7f:
         b9:3d:b7:47:df:a5:26:6c:e4:94:d2:0f:7a:5d:33:b8:ed:1b:
         fc:0c:25:9a:f1:5e:d7:c5:22:44:c9:ea:6f:f1:2d:1c:f1:5a:
         93:28:a5:cb:6e:08:75:3c:34:9a:80:8f:4b:28:ee:b3:9f:15:
         c2:89:dd:5d:3a:70:b1:2f:3a:5f:c0:23:5a:c8:e3:e2:3d:0b:
         af:eb:a4:96
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTVB
NkFDMzhFRTY4QzM2NENGNzkxODhGMDY0MjdFOUM3NjZENEMxQTAeFw0yMzExMjEx
NTMxMDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyMUJFQTU5MkJGMzcx
RDc0OTJBQUI5NTkwMDVDMDUxRjI3NTFCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr+14ogl4fxnPVNGoly96RpZVNpnLoR7dhzO17FGdbCymkEgqz
FWKKbQ5CX3S2ezE4n+rvMczkq5tU2Q5X5bzbZ/czRe+oeD2hK/LNuqaRNAiEz+0j
s7ZXFOLUlksGkFTEtDe00bf+EMqy9/pYqTepRy6ro3bZxMQbdBam2G12s7lMfGmG
8BVT8G58iDz5Ef0qvghnCnu0UitH3j4QjfFqgqEE5NOH9Zt0QVgBlNyoCdOGlIIJ
vtjI99vkb8sWIEZ/LjNvy4ylY+TTKsSQuxwmVcBegox3/P/K5LniZQdS+A/uVvyx
cPCwMPq3WFfBoRM6+TULcCfR0T78ISEFnGAVAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUAhvqWSvzcddJKquVkAXAUfJ1G/QwHwYDVR0jBBgwFoAUpaasOO5ow2TPeRiP
BkJ+nHZtTBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tT
SU5DL3BhYXNPTzVvdzJUUGVSaVBCa0otbkhadFRCby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcGFhc09PNW93MlRQZVJpUEJrSi1uSFp0VEJvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tTSU5DL0FodnFXU3Z6Y2Rk
SktxdVZrQVhBVWZKMUdfUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkAMngMA0GCSqGSIb3DQEBCwUAA4IBAQCT8KQeX+b0Sb3X6cNWaRxmz1N1
Ntcq+j6oi6nEMqLdjNt/bUdNv+dDK1S6BwHxt2FNl7Ic9fO0kHvxQgDPKza1cfYn
PFkpZ1DF1s8M7GADFQ6/2o7YqmjbiT3NfX48q8tF/A+IZlmcueClZJUTAwQ8726E
k8GBq2B0Kw8UiDOXrhE/cqv5dYeMuhFdhdJL6Ujdhp4biBnqRiixYb0OZ+BRxogX
sykZTE/CZvw5URp5fKSwyX+5PbdH36UmbOSU0g96XTO47Rv8DCWa8V7XxSJEyepv
8S0c8VqTKKXLbgh1PDSagI9LKO6znxXCid1dOnCxLzpfwCNayOPiPQuv66SW
-----END CERTIFICATE-----