Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/zADDhS91b3u6ecG4En9z11K0Xl8.roa
File:                     zADDhS91b3u6ecG4En9z11K0Xl8.roa (raw, json)
Hash identifier:          jSoK8BOazzrmHAmQiGi3reJjWMnTQOly+xot2cQFKI8=
Subject key identifier:   CC:00:C3:85:2F:75:6F:7B:BA:79:C1:B8:12:7F:73:D7:52:B4:5E:5F
Certificate issuer:       /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
Certificate serial:       0180
Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/zADDhS91b3u6ecG4En9z11K0Xl8.roa
Signing time:             Fri 01 Sep 2023 08:25:58 +0000
ROA not before:           Fri 01 Sep 2023 08:25:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63893
IP address blocks:        2400:50a0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
        Validity
            Not Before: Sep  1 08:25:58 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=CC00C3852F756F7BBA79C1B8127F73D752B45E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:c9:0b:ef:00:98:34:19:bb:41:6c:4c:0d:
                    6e:8d:dc:a3:39:a2:7f:d5:32:0d:f0:3d:18:60:db:
                    a3:61:6f:e6:63:d0:b9:6b:ba:0e:fd:46:5e:97:93:
                    a8:7b:5c:96:03:8d:89:1c:94:b1:2a:f6:ca:3d:7b:
                    12:64:76:ec:76:31:fd:de:12:6f:9b:a2:70:d3:e6:
                    26:fe:8d:c8:75:2a:69:7d:d2:ec:b5:57:4f:f8:41:
                    7a:08:da:20:78:ba:e0:d4:70:77:82:26:0c:4d:20:
                    ec:4e:d9:8c:e3:1c:6c:b2:5b:4b:f5:f9:db:8d:21:
                    a6:72:ed:f1:fe:cc:a4:d4:bb:d8:47:55:7f:cc:95:
                    61:90:fc:74:f1:e8:47:d7:5e:b8:bf:c8:50:ee:59:
                    78:d7:95:b5:4d:22:4b:31:68:e9:8a:d2:02:7d:11:
                    47:60:e0:b6:fc:39:4b:d7:0c:30:14:f5:df:ea:10:
                    90:27:a7:a1:8b:4e:42:a3:a4:d1:53:0f:64:1d:6f:
                    c8:49:97:04:c6:f1:57:b0:ba:1e:c7:37:f2:1a:cd:
                    2b:08:61:23:75:b2:66:69:e6:f1:f0:ae:57:81:63:
                    9b:24:7f:66:dd:dc:f0:dd:64:f7:24:c7:b0:4b:2a:
                    36:f5:b4:98:e4:c1:11:40:f2:fb:e3:d3:08:58:53:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:C3:85:2F:75:6F:7B:BA:79:C1:B8:12:7F:73:D7:52:B4:5E:5F
            X509v3 Authority Key Identifier:
                keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/zADDhS91b3u6ecG4En9z11K0Xl8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:50a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:39:1c:3c:53:5a:7d:87:22:93:ae:aa:a6:00:b3:04:50:f1:
         e9:a3:58:9a:7f:e4:15:95:07:34:00:1b:cb:f4:23:77:db:c1:
         fd:22:17:50:fe:5c:e6:66:fe:52:ef:ab:fe:af:74:2d:a5:cd:
         e4:1e:47:60:ae:f9:9d:91:91:ab:dc:2f:f6:97:da:fa:c8:32:
         40:30:de:0e:71:4e:17:12:8a:7d:25:c0:fc:1c:75:47:b9:41:
         f5:9a:3d:64:bf:aa:97:6e:7b:20:fe:dc:6d:ca:51:18:6d:90:
         f3:94:c3:1f:a5:d6:f2:27:43:bb:b1:cc:a9:e3:ea:79:e5:86:
         6c:75:ef:57:48:45:73:25:58:ed:ee:e4:03:eb:d7:f1:52:c1:
         b4:96:6b:38:5b:4f:aa:63:f7:9e:41:a1:5d:d3:94:4f:6f:66:
         87:25:06:89:af:5c:95:d8:fe:31:38:a7:1b:7a:91:5a:c1:2a:
         50:b1:36:07:0e:08:55:6e:e0:84:2d:9a:ed:41:75:ef:67:a0:
         28:c2:43:6b:38:87:be:5c:2e:f0:b9:08:51:8f:31:fa:e7:f8:
         9b:7c:a4:2c:23:e8:9d:1e:2a:19:3e:56:ee:54:7b:ac:85:e0:
         df:19:11:2c:91:48:13:ea:32:a4:18:e7:7c:1d:32:33:0a:a5:
         da:3d:0a:5b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF
QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yMzA5MDEw
ODI1NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENDMDBDMzg1MkY3NTZG
N0JCQTc5QzFCODEyN0Y3M0Q3NTJCNDVFNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0bMkL7wCYNBm7QWxMDW6N3KM5on/VMg3wPRhg26Nhb+Zj0Llr
ug79Rl6Xk6h7XJYDjYkclLEq9so9exJkdux2Mf3eEm+bonDT5ib+jch1Kml90uy1
V0/4QXoI2iB4uuDUcHeCJgxNIOxO2YzjHGyyW0v1+duNIaZy7fH+zKTUu9hHVX/M
lWGQ/HTx6EfXXri/yFDuWXjXlbVNIksxaOmK0gJ9EUdg4Lb8OUvXDDAU9d/qEJAn
p6GLTkKjpNFTD2Qdb8hJlwTG8Vewuh7HN/IazSsIYSN1smZp5vHwrleBY5skf2bd
3PDdZPckx7BLKjb1tJjkwRFA8vvj0whYU1oTAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUzADDhS91b3u6ecG4En9z11K0Xl8wHwYDVR0jBBgwFoAUPOusQFclHIqquVTc
IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz
ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvekFERGhTOTFi
M3U2ZWNHNEVuOXoxMUswWGw4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQAUKAwDQYJKoZIhvcNAQELBQADggEBAGA5HDxTWn2HIpOuqqYAswRQ
8emjWJp/5BWVBzQAG8v0I3fbwf0iF1D+XOZm/lLvq/6vdC2lzeQeR2Cu+Z2Rkavc
L/aX2vrIMkAw3g5xThcSin0lwPwcdUe5QfWaPWS/qpdueyD+3G3KURhtkPOUwx+l
1vInQ7uxzKnj6nnlhmx171dIRXMlWO3u5APr1/FSwbSWazhbT6pj955BoV3TlE9v
ZoclBomvXJXY/jE4pxt6kVrBKlCxNgcOCFVu4IQtmu1Bde9noCjCQ2s4h75cLvC5
CFGPMfrn+Jt8pCwj6J0eKhk+Vu5Ue6yF4N8ZESyRSBPqMqQY53wdMjMKpdo9Cls=
-----END CERTIFICATE-----