Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EBT/MfeNc4JVvtd99EDnLMMsyJnygcI.roa
File:                     MfeNc4JVvtd99EDnLMMsyJnygcI.roa (raw, json)
Hash identifier:          GVrr9MNP0p33Si4NvbsuHcAxoOS2GyQzAbpafLfHeic=
Subject key identifier:   31:F7:8D:73:82:55:BE:D7:7D:F4:40:E7:2C:C3:2C:C8:99:F2:81:C2
Certificate issuer:       /CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Certificate serial:       0953
Authority key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/MfeNc4JVvtd99EDnLMMsyJnygcI.roa
Signing time:             Wed 29 Sep 2021 02:42:27 +0000
ROA not before:           Wed 29 Sep 2021 02:42:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24154
IP address blocks:        211.76.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
        Validity
            Not Before: Sep 29 02:42:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=31F78D738255BED77DF440E72CC32CC899F281C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:55:9f:fd:14:9b:7f:8d:74:1f:57:00:86:
                    dc:16:45:20:29:e7:2b:6b:d9:55:df:f0:43:41:28:
                    26:44:7e:b2:fa:cb:8e:07:a9:ea:ff:3d:aa:cd:52:
                    20:2b:12:56:05:ee:f0:99:18:c6:01:51:1e:76:0a:
                    b6:4a:b0:b1:9f:45:5a:f9:15:7e:61:9f:71:35:95:
                    57:43:48:4f:99:27:68:af:6b:60:57:eb:3e:4c:0a:
                    80:07:da:3f:56:0b:31:ec:5a:8d:26:ec:4a:5e:6f:
                    e7:48:e5:e8:90:84:dc:01:16:14:9a:f7:a7:8a:e8:
                    1d:b0:2e:fc:57:21:b3:d4:bb:08:55:4f:43:5e:16:
                    e8:42:81:6c:ff:8e:70:36:be:fa:26:0e:f0:98:c7:
                    31:cb:79:29:14:73:f0:73:ea:1d:05:59:4c:6d:67:
                    e2:13:94:c4:15:dd:d8:89:32:07:52:b6:60:86:7e:
                    bf:7a:57:f5:b2:55:f2:15:54:d3:11:01:0f:e5:62:
                    ac:9e:e2:e7:14:ad:77:27:7e:9e:16:79:72:8f:a9:
                    3c:c9:6a:a6:f1:40:b6:be:d2:1d:ae:1f:32:a4:69:
                    cf:c3:10:0a:9c:87:53:49:5a:57:a8:99:c5:7e:dc:
                    1e:c1:20:01:4e:04:35:6b:94:4b:15:19:a6:39:2f:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F7:8D:73:82:55:BE:D7:7D:F4:40:E7:2C:C3:2C:C8:99:F2:81:C2
            X509v3 Authority Key Identifier:
                keyid:2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/MfeNc4JVvtd99EDnLMMsyJnygcI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:c0:8f:a7:7d:7c:e7:18:de:8e:e8:f7:16:39:c7:0e:5d:
         d6:0d:88:e2:35:d5:ca:18:19:f9:f5:a6:84:ff:79:93:b4:02:
         11:61:cf:18:1d:ad:86:a2:35:47:0c:79:cb:6f:88:77:6e:a6:
         98:39:df:95:15:14:d2:bb:da:85:92:ea:34:cd:59:72:cf:5e:
         f8:47:ba:72:8f:fb:7a:de:7c:67:a6:34:4d:70:14:7f:29:df:
         e8:a4:0d:dc:6f:94:ef:d5:fe:39:3f:d2:8d:ac:ba:7e:e8:7e:
         f2:98:36:60:e5:cc:ee:48:76:9c:bc:ba:17:ee:e0:bc:83:c4:
         ef:03:b4:69:8c:8d:b2:2a:3b:23:85:a8:9a:97:ce:e0:40:fa:
         46:46:bd:de:68:2a:0e:74:69:b0:04:13:2a:c1:30:f9:70:17:
         26:2b:c2:45:05:94:4f:24:1e:8e:a3:1b:8b:98:55:f8:cb:69:
         86:45:63:e6:da:a2:31:2a:65:8d:79:db:45:7f:0d:8e:bc:a8:
         49:a7:8d:31:27:6d:09:e7:e8:60:83:34:97:5d:f5:78:dd:a2:
         4c:41:81:48:1f:5b:96:bc:10:21:29:f8:29:49:d1:7a:21:42:
         7f:77:26:25:64:32:03:66:24:54:11:8f:ad:be:f1:da:e1:96:
         3a:81:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----