Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/kMJo6pCYNgDIlyp8bY0hQD9jrjU.roa
File:                     kMJo6pCYNgDIlyp8bY0hQD9jrjU.roa (raw, json)
Hash identifier:          W2CRlr7Lh76Lg2TZeHOkHsPIQJlbLExBUYat/MIiltM=
Subject key identifier:   90:C2:68:EA:90:98:36:00:C8:97:2A:7C:6D:8D:21:40:3F:63:AE:35
Certificate issuer:       /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial:       0B86
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/kMJo6pCYNgDIlyp8bY0hQD9jrjU.roa
Signing time:             Wed 29 Sep 2021 02:53:52 +0000
ROA not before:           Wed 29 Sep 2021 02:53:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131670
IP address blocks:        2404:fdc0:111::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2950 (0xb86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Validity
            Not Before: Sep 29 02:53:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=90C268EA90983600C8972A7C6D8D21403F63AE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:b4:9e:c8:da:32:50:27:df:9f:70:ce:42:
                    20:5b:65:93:87:38:0d:f9:0c:5f:8c:48:6b:ed:b8:
                    55:8a:00:d5:be:cb:b3:0d:55:fe:d0:ff:be:67:6d:
                    d6:d0:2f:b4:b2:3a:dc:4b:98:fc:d2:d1:0d:34:15:
                    bb:8c:24:f7:57:f0:57:9a:0e:5f:59:0b:29:60:fb:
                    88:33:d8:d4:fe:45:37:35:f3:cb:5c:04:5f:d4:5a:
                    41:d3:7e:0f:88:18:1c:fb:3e:42:eb:e1:22:96:62:
                    00:3e:f8:c8:87:7f:ba:df:9f:52:05:4b:cb:74:4d:
                    2a:78:5f:0b:99:ad:4c:e4:ce:12:f8:d2:6a:88:dd:
                    78:07:e0:a6:e7:ea:a1:da:1a:fe:21:36:3a:2b:56:
                    59:d2:7e:35:d9:5c:e8:b4:ad:1a:35:7a:be:de:52:
                    99:36:56:5f:cc:91:d1:43:46:40:47:8a:dc:7e:c5:
                    e0:9c:a1:bc:bf:09:7a:0f:e9:cb:18:89:a1:92:b0:
                    29:f6:a6:a6:98:b5:6f:13:04:65:19:e7:68:a8:b4:
                    e0:77:81:4f:d4:bd:9a:c2:86:8a:56:38:15:56:8f:
                    c7:c4:9e:b3:ea:51:6d:1c:79:c1:2b:a4:25:77:53:
                    78:fa:fd:e0:79:4e:a3:23:05:27:b7:9e:c7:c1:b0:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C2:68:EA:90:98:36:00:C8:97:2A:7C:6D:8D:21:40:3F:63:AE:35
            X509v3 Authority Key Identifier:
                keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/kMJo6pCYNgDIlyp8bY0hQD9jrjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fdc0:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:1d:1d:eb:d1:9b:c3:3f:a0:0d:0f:c5:36:b6:04:16:c5:
         6a:48:56:2d:13:07:81:3b:41:0e:27:d6:09:ab:43:18:7a:51:
         f3:7c:cd:b7:d8:8f:a0:9a:05:fa:82:58:31:eb:7d:38:b6:05:
         c6:a2:fc:03:93:ae:6a:a1:f6:54:b6:72:5c:05:70:c8:10:94:
         16:f9:a3:d5:16:49:ce:81:f8:89:f4:91:d5:9e:3c:7c:b4:1a:
         f9:5d:a4:4a:53:03:c9:64:70:46:fb:be:58:c0:2f:a2:17:d8:
         01:f9:02:bc:64:2d:68:59:38:5a:69:e6:72:5f:9b:87:97:2a:
         be:66:96:4b:dc:4a:f1:ed:23:69:c4:11:76:4f:b3:03:22:40:
         d2:56:91:5a:38:74:2d:5c:ab:72:77:d1:2e:b8:99:45:5d:a9:
         7d:9d:d7:68:58:b1:20:c3:bb:3f:2a:b8:2f:f9:48:da:19:50:
         a8:cc:83:6e:c0:4d:07:6f:42:40:fb:d4:94:6d:6b:77:be:26:
         ac:a0:68:bb:cd:07:9f:80:59:1e:78:54:d9:b9:5e:79:9c:f4:
         a2:9b:01:e4:33:08:c4:35:a6:62:00:ac:4b:bb:16:5c:82:d0:
         c5:ee:66:0c:ec:75:b4:64:b4:83:ab:78:6d:53:64:d7:bb:64:
         81:ee:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----