Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa
File:                     8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa (raw, json)
Hash identifier:          0/vtKlJ3H3CunJFEDaE8qW5hMwqgCUjPWKkTKSXuD/w=
Subject key identifier:   F1:7D:91:BB:17:BB:B6:29:E0:B4:EA:49:93:67:78:B8:36:CC:03:B6
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0CF2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa
Signing time:             Mon 15 Jan 2024 21:23:55 +0000
ROA not before:           Mon 15 Jan 2024 21:23:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        222.156.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:23:55 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F17D91BB17BBB629E0B4EA49936778B836CC03B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:b4:49:86:16:0c:b4:94:97:cb:91:44:ba:
                    47:6c:2f:ba:4b:36:07:4d:5e:35:2a:ef:7c:5b:df:
                    ef:66:5b:a6:80:1a:6f:8d:ca:34:39:54:5d:a2:a1:
                    f7:02:45:27:bd:b2:f1:b2:99:c0:03:f7:ae:be:a8:
                    58:99:33:43:27:53:f8:e3:88:e4:9e:e2:66:d5:11:
                    2b:af:a8:e9:84:4d:67:1f:75:db:fe:09:b2:30:02:
                    0d:e7:7f:8e:d9:c6:2c:48:00:7f:5e:83:86:58:aa:
                    64:c4:38:fc:73:37:e2:91:6d:e5:42:98:11:eb:a6:
                    bc:38:be:a1:22:81:a9:ab:86:5d:dd:cd:e4:7c:23:
                    4a:61:e9:f5:d2:b1:96:d1:6e:b2:f8:84:3e:47:9e:
                    75:72:4f:68:94:b4:c7:38:64:15:31:25:2f:7c:51:
                    4e:c6:27:f8:ff:4b:9c:49:b0:76:9e:99:f9:93:b2:
                    24:df:32:d1:94:e1:0f:8c:ac:2b:e4:c3:d6:df:af:
                    21:a8:16:fc:93:0a:8a:5f:14:9f:1a:40:31:f6:3b:
                    1c:68:61:60:4d:18:10:cd:8a:72:89:9f:21:5b:01:
                    1c:3d:a2:46:a4:3a:6e:19:6c:54:7e:c7:00:2c:a4:
                    f2:2d:99:3b:ce:d9:72:c5:e7:33:d3:4b:4f:3a:14:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:91:BB:17:BB:B6:29:E0:B4:EA:49:93:67:78:B8:36:CC:03:B6
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:c6:e6:73:58:2d:17:47:ee:3b:9d:47:27:19:69:54:9a:
         91:f5:ae:5a:cc:d1:f5:a3:1a:bc:55:5e:0c:ee:41:3f:15:bb:
         4f:01:7f:14:79:db:90:7a:f9:06:62:93:6b:c3:5a:f2:75:43:
         bc:97:ed:78:b1:98:df:47:74:3b:02:4e:1e:53:a4:81:95:74:
         3c:be:7a:3e:f6:ca:54:e3:bc:42:9b:d3:c9:9a:f8:d7:0c:15:
         ab:41:b4:e5:5a:9d:ff:36:20:90:8e:76:6a:54:ec:51:1c:ab:
         88:20:21:90:ae:92:d4:6d:2d:6f:48:4d:61:20:56:9f:3c:d8:
         b4:40:d2:4b:f3:8c:1f:52:69:88:f3:1a:d8:39:dd:32:55:db:
         bd:d6:fe:9d:be:2d:b3:59:dc:da:30:8d:4d:63:fd:d8:71:b6:
         bc:1c:76:b0:4a:7d:94:10:65:a6:76:a1:d4:b7:60:9b:9d:14:
         33:76:0b:a3:5e:2e:fb:8c:f0:d1:3b:0e:19:44:c0:9f:6c:e1:
         10:2a:ef:45:e8:9d:69:57:56:60:61:8a:0d:82:33:51:f0:a7:
         fe:1f:22:c7:c5:23:36:68:7c:fe:f3:18:44:2c:9f:aa:8e:a9:
         22:87:43:3a:cd:8b:48:7c:b8:d8:b9:a4:9c:9d:de:58:c9:8d:
         ab:30:98:9f
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTIzNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxN0Q5MUJCMTdCQkI2
MjlFMEI0RUE0OTkzNjc3OEI4MzZDQzAzQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjCbRJhhYMtJSXy5FEukdsL7pLNgdNXjUq73xb3+9mW6aAGm+N
yjQ5VF2iofcCRSe9svGymcAD966+qFiZM0MnU/jjiOSe4mbVESuvqOmETWcfddv+
CbIwAg3nf47ZxixIAH9eg4ZYqmTEOPxzN+KRbeVCmBHrprw4vqEigamrhl3dzeR8
I0ph6fXSsZbRbrL4hD5HnnVyT2iUtMc4ZBUxJS98UU7GJ/j/S5xJsHaemfmTsiTf
MtGU4Q+MrCvkw9bfryGoFvyTCopfFJ8aQDH2OxxoYWBNGBDNinKJnyFbARw9okak
Om4ZbFR+xwAspPItmTvO2XLF5zPTS086FM3FAgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQU8X2Ruxe7tingtOpJk2d4uDbMA7YwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhYMlJ1eGU3dGluZ3RPcEprMmQ0dURi
TUE3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq
hkiG9w0BAQsFAAOCAQEAIvfG5nNYLRdH7judRycZaVSakfWuWszR9aMavFVeDO5B
PxW7TwF/FHnbkHr5BmKTa8Na8nVDvJfteLGY30d0OwJOHlOkgZV0PL56PvbKVOO8
QpvTyZr41wwVq0G05Vqd/zYgkI52alTsURyriCAhkK6S1G0tb0hNYSBWnzzYtEDS
S/OMH1JpiPMa2DndMlXbvdb+nb4ts1nc2jCNTWP92HG2vBx2sEp9lBBlpnah1Ldg
m50UM3YLo14u+4zw0TsOGUTAn2zhECrvReidaVdWYGGKDYIzUfCn/h8ix8UjNmh8
/vMYRCyfqo6pIodDOs2LSHy42LmknJ3eWMmNqzCYnw==
-----END CERTIFICATE-----