Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/fRUUxqtF6BzjsukrC_uvaufpqPE.roa
File:                     fRUUxqtF6BzjsukrC_uvaufpqPE.roa (raw, json)
Hash identifier:          9TfhxTSFcU8jOcnIH3iAagqdLYDgHQO5dfMaNacQJmk=
Subject key identifier:   7D:15:14:C6:AB:45:E8:1C:E3:B2:E9:2B:0B:FB:AF:6A:E7:E9:A8:F1
Certificate issuer:       /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial:       0C88
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/fRUUxqtF6BzjsukrC_uvaufpqPE.roa
Signing time:             Wed 14 Sep 2022 23:49:39 +0000
ROA not before:           Wed 14 Sep 2022 23:49:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131669
IP address blocks:        2404:fdc0:110::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3208 (0xc88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Validity
            Not Before: Sep 14 23:49:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7D1514C6AB45E81CE3B2E92B0BFBAF6AE7E9A8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:e7:7f:18:5d:c2:5e:54:a0:0d:65:3d:38:
                    3a:af:2e:8a:35:36:ad:7a:ed:5e:7c:e8:a7:f9:c0:
                    f3:bb:f3:40:1b:66:55:b7:0e:33:13:92:68:24:91:
                    86:7c:13:ba:7b:a7:7f:5b:24:98:cf:b5:06:1f:bf:
                    9a:0c:68:ff:c3:fc:24:76:b9:ab:e3:21:74:8e:69:
                    c7:da:a1:4c:11:18:44:f0:f4:9d:df:6a:6b:80:c6:
                    9b:31:d6:85:4e:b1:a0:de:99:90:61:3e:ce:b9:c3:
                    03:2f:70:5b:14:51:21:2f:be:2c:f4:cc:59:26:2c:
                    c6:87:4a:dc:09:04:b5:59:30:0b:70:33:cc:2e:11:
                    d5:ed:a5:86:2d:21:9f:d8:7c:67:cf:53:df:17:da:
                    0f:50:bb:46:97:91:22:9d:83:05:5f:f2:54:6a:14:
                    6f:50:7e:8d:42:2a:28:3b:38:cd:69:f3:18:fa:2c:
                    ca:05:b3:60:73:89:7d:2d:68:39:75:36:59:53:66:
                    d6:b2:97:1d:cf:98:94:30:4d:1d:37:c8:9e:6a:dc:
                    01:cc:e5:e5:44:0f:b4:cc:0b:25:5e:ae:86:bf:8b:
                    84:fd:de:7d:62:a1:e8:76:72:8c:76:7d:87:32:10:
                    29:ff:46:72:f6:b2:ca:f1:d3:b1:4f:8b:73:68:50:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:14:C6:AB:45:E8:1C:E3:B2:E9:2B:0B:FB:AF:6A:E7:E9:A8:F1
            X509v3 Authority Key Identifier:
                keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/fRUUxqtF6BzjsukrC_uvaufpqPE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fdc0:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:f1:54:e2:48:f6:65:80:cd:c7:8f:03:57:b7:0f:cb:5a:
         17:10:ab:3e:ff:ba:97:af:61:cf:6c:51:d8:f6:ee:e6:19:5c:
         1d:bb:16:52:69:90:d8:30:ee:56:85:03:f6:83:4b:b8:07:e7:
         78:17:44:a0:60:90:36:e2:6d:af:0c:01:12:67:68:bb:e5:71:
         27:84:c6:2d:69:b6:bc:d7:4e:c7:b1:d3:c3:ed:d8:83:42:53:
         5b:bd:3c:a4:9d:5c:13:02:98:e2:b2:5b:d7:a9:8e:49:40:7b:
         34:27:0f:71:fe:b3:8d:5a:b9:12:23:19:0a:73:b5:c7:e9:d6:
         4b:b6:00:c9:39:35:36:1c:74:37:a9:fb:c7:63:4e:01:cc:ce:
         73:de:54:e7:cf:da:d3:f3:07:6d:e0:c4:23:25:a5:eb:2c:63:
         44:0d:eb:bf:53:a9:7c:fd:88:04:b7:48:d7:08:a8:36:0d:21:
         bc:a0:2f:c0:50:fe:af:7a:56:48:2a:dc:a8:07:d3:e1:98:10:
         c0:32:aa:39:5d:fb:c4:0b:08:63:45:43:2a:8b:20:78:5a:6d:
         85:e1:8b:1c:6e:5a:e5:22:a5:dd:95:e4:d8:fe:82:28:fe:49:
         41:5d:28:26:08:9a:b1:68:a9:4f:54:34:aa:e4:1d:1f:86:71:
         0e:51:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----