Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/t2xSd7F8vO2L3aTQWLNWsqtD5co.roa
File:                     t2xSd7F8vO2L3aTQWLNWsqtD5co.roa (raw, json)
Hash identifier:          e4xOiu5b+vmZuS7ql2wThAR+BpYwgSPM8CUnnTQk/Xc=
Subject key identifier:   B7:6C:52:77:B1:7C:BC:ED:8B:DD:A4:D0:58:B3:56:B2:AB:43:E5:CA
Certificate issuer:       /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial:       099F
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/t2xSd7F8vO2L3aTQWLNWsqtD5co.roa
Signing time:             Tue 29 Sep 2020 10:03:03 +0000
ROA not before:           Tue 29 Sep 2020 10:03:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131669
IP address blocks:        2404:fdc0:110::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Validity
            Not Before: Sep 29 10:03:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B76C5277B17CBCED8BDDA4D058B356B2AB43E5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:c5:a1:90:08:93:af:0e:52:b8:70:66:79:
                    31:9e:51:f2:b0:52:8e:91:57:fd:fe:73:33:84:7f:
                    83:18:fd:5f:c7:c6:5e:2f:67:ab:83:7b:27:50:2e:
                    bc:ef:d5:cc:a1:47:ad:d5:ad:7f:6c:ef:94:f3:ea:
                    77:c0:b1:20:d9:00:48:07:aa:a6:79:74:a0:7f:a0:
                    65:91:70:ae:61:a0:5c:f6:7a:9d:5a:2f:5e:ef:ec:
                    c9:eb:da:74:df:a3:ff:15:2b:08:6e:7f:a9:34:cc:
                    2d:3e:3d:d0:4a:c7:54:ac:86:55:fb:2c:b2:c1:91:
                    3b:e0:85:8b:1d:4c:f0:05:bd:02:0e:4c:32:b2:b3:
                    0a:7b:07:7b:b5:8b:70:34:0d:e0:e2:11:bc:62:48:
                    40:55:5b:96:6d:3e:50:7c:de:77:80:a5:4b:08:9e:
                    88:41:e1:12:c2:d5:b0:52:c2:87:36:f9:3b:4d:ad:
                    78:c8:2d:3f:f5:26:44:31:99:a4:8f:46:42:c6:0d:
                    3c:a5:4f:14:e3:cf:14:75:88:4a:2a:71:88:c5:1e:
                    93:54:da:b7:ba:8a:d4:5e:62:47:04:d9:65:83:0c:
                    c3:11:f0:11:e4:44:68:d6:91:f2:d5:e3:1c:2c:b7:
                    f9:84:86:cb:a8:4e:db:96:43:44:25:14:41:b2:8a:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6C:52:77:B1:7C:BC:ED:8B:DD:A4:D0:58:B3:56:B2:AB:43:E5:CA
            X509v3 Authority Key Identifier:
                keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/t2xSd7F8vO2L3aTQWLNWsqtD5co.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fdc0:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:58:76:5f:6c:43:9d:6f:35:6c:a0:1e:a5:96:74:31:7c:
         17:1d:b1:2f:6e:f8:ee:0e:1c:5d:89:3b:b1:92:c6:f1:4d:54:
         6d:42:54:fb:43:a8:5a:17:9d:5b:06:3c:2b:c7:7b:73:f8:fa:
         38:73:48:b0:4d:a4:77:3b:b2:5f:f8:e7:a7:73:d0:b0:d7:b1:
         42:5a:d0:c4:97:ff:f1:f9:d2:e3:65:7c:10:01:9b:42:6c:a5:
         89:16:e3:59:81:fc:70:d3:4c:8f:8b:44:a0:4b:14:3a:13:ab:
         09:94:8b:01:7f:2a:cd:ee:92:41:84:3d:70:75:94:c5:7e:32:
         83:7b:36:19:a4:c4:b7:34:e6:74:d2:27:61:56:2f:08:92:aa:
         d2:49:00:22:51:d7:b7:3f:fa:6c:ec:ca:4f:3a:cd:95:2b:06:
         9e:19:c2:71:87:a2:81:69:b8:fb:31:cd:fc:b1:d0:18:66:8a:
         26:d8:a4:a4:4b:f8:bc:d1:0d:77:1f:3a:c6:e6:68:af:5f:d3:
         e1:78:94:69:50:7d:c8:cd:48:3b:8d:fb:73:60:6d:da:33:73:
         f2:99:10:72:2e:11:46:47:21:5e:aa:ac:1c:33:8b:90:e9:ce:
         f5:80:39:98:d3:b9:29:94:b0:1a:4c:66:ba:5c:2f:c6:66:39:
         c9:09:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----