Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/4gax07chyuj0JiMFTGEXIZlSQSM.roa
File:                     4gax07chyuj0JiMFTGEXIZlSQSM.roa (raw, json)
Hash identifier:          Pd3wfS/10z7hTcfy/+TGA3TKrrUFFAIdgk1XhzefUDA=
Subject key identifier:   E2:06:B1:D3:B7:21:CA:E8:F4:26:23:05:4C:61:17:21:99:52:41:23
Certificate issuer:       /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial:       0B85
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/4gax07chyuj0JiMFTGEXIZlSQSM.roa
Signing time:             Wed 29 Sep 2021 02:53:52 +0000
ROA not before:           Wed 29 Sep 2021 02:53:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131669
IP address blocks:        103.140.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Validity
            Not Before: Sep 29 02:53:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E206B1D3B721CAE8F42623054C61172199524123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:73:39:ed:d9:f6:6e:a5:a6:81:75:1a:a6:
                    d3:cd:7f:fb:a1:bc:a4:a1:6d:4c:de:c8:63:f7:a5:
                    79:b9:1c:63:46:2c:6b:49:40:f5:34:fa:d5:d0:32:
                    2f:9b:fc:ce:52:d3:95:bf:b9:62:54:d2:7c:40:ee:
                    1c:03:c1:9f:80:42:8a:65:8b:2e:bf:bb:f8:3f:a3:
                    6a:96:73:71:87:ee:fc:2c:61:ad:f8:1a:df:53:7b:
                    ed:ce:61:50:91:26:fa:d6:2f:ee:63:27:7f:22:df:
                    8a:75:11:bf:0e:12:53:8e:21:0e:aa:3f:02:80:5c:
                    dd:e0:d5:46:70:67:fb:4f:73:00:57:11:c1:42:9f:
                    6a:06:23:cb:f0:fd:f7:84:4f:6e:ac:d6:0f:bc:07:
                    20:85:32:3f:c2:86:b7:4d:32:76:67:78:30:39:f2:
                    1a:51:42:fb:a9:03:ae:eb:33:7d:3c:17:e3:9a:1a:
                    1e:0e:86:7d:09:c2:59:82:f8:80:cf:fa:a0:46:e1:
                    ba:90:6b:c2:80:52:be:fa:05:42:96:a3:5b:03:59:
                    49:0f:66:c3:12:f7:66:b2:1c:eb:a0:f0:8c:a1:f3:
                    98:47:56:34:88:ba:fe:d7:d5:60:1c:67:dc:3c:9c:
                    31:be:6a:1e:78:64:eb:9a:9a:a1:39:04:f5:a4:a4:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:06:B1:D3:B7:21:CA:E8:F4:26:23:05:4C:61:17:21:99:52:41:23
            X509v3 Authority Key Identifier:
                keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/4gax07chyuj0JiMFTGEXIZlSQSM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:53:ec:05:05:f0:53:ab:71:57:61:fa:b2:49:ae:54:62:2f:
         fc:53:20:19:67:c0:c9:d9:b8:c1:73:d5:d2:b8:a3:68:bf:c6:
         c6:1f:56:04:27:08:cb:6d:84:08:f1:56:07:60:f8:32:07:c6:
         c9:2e:41:d3:e0:96:8b:a7:9f:72:7c:18:53:e4:9c:75:c1:bc:
         10:b3:5f:8b:43:81:31:0a:c2:1e:9c:06:b0:3c:d1:16:d3:67:
         6b:e7:c7:ef:62:44:49:ea:d9:00:95:c4:4c:ba:03:5b:42:51:
         9b:3c:05:87:71:f9:d1:c1:3b:da:29:a7:80:4d:40:ff:c2:f7:
         7a:d5:40:69:aa:41:99:a4:1f:6b:e6:cd:70:27:bd:06:d3:93:
         35:d0:89:81:08:93:01:d1:ee:9b:e7:40:17:e3:02:e6:03:37:
         10:67:8b:ca:0a:be:12:f6:6a:eb:bd:48:8c:33:ed:c5:0a:1a:
         25:8b:21:47:4f:f3:5d:74:2a:88:2c:39:f8:e1:d1:e1:b0:33:
         f7:4a:98:82:85:13:6b:81:3d:28:95:4c:64:b9:8c:4c:6d:68:
         49:60:06:e1:4f:70:b5:3e:71:04:db:0d:1b:40:91:53:84:d6:
         2c:16:67:20:c7:0a:a4:cc:69:0d:5e:f5:65:12:c0:60:81:6a:
         3e:f3:1a:a0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzY0
Nzc2QzY4RjlCNkNEQ0EwODBFMjZCMDFGMzE4N0UwNzJGNUM5OTAeFw0yMTA5Mjkw
MjUzNTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEUyMDZCMUQzQjcyMUNB
RThGNDI2MjMwNTRDNjExNzIxOTk1MjQxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdj3M57dn2bqWmgXUaptPNf/uhvKShbUzeyGP3pXm5HGNGLGtJ
QPU0+tXQMi+b/M5S05W/uWJU0nxA7hwDwZ+AQopliy6/u/g/o2qWc3GH7vwsYa34
Gt9Te+3OYVCRJvrWL+5jJ38i34p1Eb8OElOOIQ6qPwKAXN3g1UZwZ/tPcwBXEcFC
n2oGI8vw/feET26s1g+8ByCFMj/ChrdNMnZneDA58hpRQvupA67rM308F+OaGh4O
hn0JwlmC+IDP+qBG4bqQa8KAUr76BUKWo1sDWUkPZsMS92ayHOug8Iyh85hHVjSI
uv7X1WAcZ9w8nDG+ah54ZOuamqE5BPWkpBwPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4gax07chyuj0JiMFTGEXIZlSQSMwHwYDVR0jBBgwFoAUNkd2xo+bbNyggOJr
AfMYfgcvXJkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9QUExF
Ui9Oa2QyeG8tYmJOeWdnT0pyQWZNWWZnY3ZYSmsuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL05rZDJ4by1iYk55Z2dPSnJBZk1ZZmdjdlhKay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RPUFBMRVIvNGdheDA3Y2h5dWowSmlN
RlRHRVhJWmxTUVNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGeMbjANBgkqhkiG9w0BAQsFAAOCAQEAeVPsBQXwU6txV2H6skmuVGIv/FMgGWfA
ydm4wXPV0rijaL/Gxh9WBCcIy22ECPFWB2D4MgfGyS5B0+CWi6efcnwYU+ScdcG8
ELNfi0OBMQrCHpwGsDzRFtNna+fH72JESerZAJXETLoDW0JRmzwFh3H50cE72imn
gE1A/8L3etVAaapBmaQfa+bNcCe9BtOTNdCJgQiTAdHum+dAF+MC5gM3EGeLygq+
EvZq671IjDPtxQoaJYshR0/zXXQqiCw5+OHR4bAz90qYgoUTa4E9KJVMZLmMTG1o
SWAG4U9wtT5xBNsNG0CRU4TWLBZnIMcKpMxpDV71ZRLAYIFqPvMaoA==
-----END CERTIFICATE-----