Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa
File:                     -mDaPmd8TCGO63H4krFHqwF9xr4.roa (raw, json)
Hash identifier:          QO36esN67um8b5wuxujl46uW1M+0eM77DZzm2dCz8Tg=
Subject key identifier:   FA:60:DA:3E:67:7C:4C:21:8E:EB:71:F8:92:B1:47:AB:01:7D:C6:BE
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0CAA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa
Signing time:             Mon 15 Jan 2024 21:10:35 +0000
ROA not before:           Mon 15 Jan 2024 21:10:35 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        210.201.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:10:35 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FA60DA3E677C4C218EEB71F892B147AB017DC6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:0f:c7:4e:61:9e:aa:79:2b:c8:be:0a:27:
                    68:10:81:62:84:85:67:56:d2:b6:bc:0e:a7:53:25:
                    55:a5:46:72:65:0c:65:85:ae:ac:e0:b1:16:b8:7b:
                    fe:1a:34:33:df:fa:73:df:0f:ba:ba:00:96:1b:db:
                    18:60:9f:51:89:6e:c6:4c:33:15:81:a3:cf:56:b0:
                    e0:9f:4c:65:24:93:f5:04:d6:e8:49:ae:f9:46:86:
                    b4:90:17:78:fd:2b:ee:fd:de:4d:d2:e5:e9:10:bd:
                    1a:ae:6c:ab:29:0a:67:76:48:bf:c4:98:a6:7d:3e:
                    e6:12:93:02:81:55:ed:37:86:dc:da:5f:12:97:23:
                    7b:32:e7:02:46:69:6f:7d:6c:d1:14:05:cc:79:99:
                    2d:38:94:9f:54:a1:23:5b:4a:c0:68:c7:ec:60:44:
                    9b:e5:e1:55:0b:52:16:3b:e6:1a:6f:d8:17:f2:66:
                    fc:fa:22:9d:ba:7a:3a:88:d1:d5:fe:bc:26:1e:5f:
                    4c:a6:c0:31:63:6c:0b:8d:c2:b4:c4:e3:11:d0:5f:
                    bf:36:f9:29:3e:1b:94:4a:aa:91:ee:7c:22:14:fa:
                    8f:e7:f6:43:a5:64:f0:9a:6b:d7:f9:8b:8d:c6:4b:
                    72:4a:4d:5f:c3:71:95:f2:92:40:cb:4b:ca:76:e3:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:DA:3E:67:7C:4C:21:8E:EB:71:F8:92:B1:47:AB:01:7D:C6:BE
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:90:97:a6:41:a5:d7:6d:52:37:e7:82:4f:75:9e:b7:53:3b:
         39:1e:e2:38:53:f1:83:af:f5:03:8b:32:69:78:68:62:b8:4d:
         6e:23:25:8a:7b:22:3e:b8:4b:ce:b4:60:9d:dd:a0:55:f9:e4:
         a1:c9:76:f0:71:be:b9:74:57:2d:99:c4:d7:66:ca:3c:dd:09:
         10:9e:d0:0d:85:14:33:d4:4e:a0:26:94:b0:36:e7:b5:d6:11:
         b2:b7:db:6a:0d:2e:4c:62:50:ba:ba:06:35:99:6d:d6:f8:13:
         34:66:49:7c:af:c2:83:20:0c:d4:86:73:24:88:f4:61:69:14:
         2e:9b:87:f4:9f:65:0d:e4:84:fc:82:97:00:75:d0:9c:9e:94:
         cb:64:8f:f4:f8:db:02:f2:1e:f0:c3:77:82:8d:db:0a:cf:4d:
         73:a7:fd:db:84:45:ad:f7:b1:3f:a3:31:68:9c:69:64:08:75:
         3e:e3:a2:dc:dd:7a:85:e2:7e:30:e8:5c:03:3d:d0:61:ff:82:
         3d:e6:98:b3:39:02:d5:91:b9:01:8e:73:0f:78:49:40:22:66:
         3f:64:1e:39:27:3d:81:15:da:b5:26:35:60:95:c4:91:10:68:
         05:90:6f:8f:95:00:6b:54:a9:8e:56:0b:08:94:96:a1:64:07:
         33:8d:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----