Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZWFApGeTaQpXgRpZzB8K6wFdDp8.roa
File:                     ZWFApGeTaQpXgRpZzB8K6wFdDp8.roa (raw, json)
Hash identifier:          VGYyyBs80/bFxK626azX/Jpoe3YywhWZcfHRt7X8P5c=
Subject key identifier:   65:61:40:A4:67:93:69:0A:57:81:1A:59:CC:1F:0A:EB:01:5D:0E:9F
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0DC8
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZWFApGeTaQpXgRpZzB8K6wFdDp8.roa
Signing time:             Mon 15 Jan 2024 21:30:46 +0000
ROA not before:           Mon 15 Jan 2024 21:30:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24154
IP address blocks:        60.244.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3528 (0xdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:30:46 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=656140A46793690A57811A59CC1F0AEB015D0E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:37:96:0d:fb:44:25:5e:5d:ee:32:ac:50:
                    f6:2b:91:5c:06:bd:6f:7b:b5:14:62:88:50:18:2d:
                    ea:8b:35:03:67:7a:5d:78:84:d4:0f:05:05:3d:a2:
                    3f:89:e4:e4:65:2f:1a:99:0b:df:b0:d9:02:84:f8:
                    a1:1f:34:01:4d:78:18:61:c5:f5:69:7e:c3:c0:e9:
                    80:af:53:38:ca:62:89:36:63:a7:47:26:66:5a:9d:
                    34:b5:84:33:fe:70:77:d1:35:a3:63:c7:1a:a5:64:
                    dc:f9:61:34:0c:ae:f1:4c:e6:e0:8e:8f:32:3e:4d:
                    8b:e6:58:ab:e2:9a:4a:43:b5:b1:ec:72:6e:1a:35:
                    44:ea:bf:6f:86:1f:1f:f9:26:ad:3b:17:2b:db:88:
                    84:3b:f6:35:04:56:28:81:4f:b0:ca:cc:51:3c:d8:
                    4c:81:02:fb:17:9b:60:b9:b9:fb:27:36:4d:b6:e3:
                    45:0c:22:6b:4e:c2:d1:7f:32:f7:ac:ec:79:88:c6:
                    a1:7f:52:74:a6:61:8e:ac:c2:cb:5e:5e:c6:66:36:
                    57:9c:8e:8d:62:06:b6:c6:fc:be:2c:ff:0e:32:e0:
                    07:dd:62:94:f9:f0:26:b8:55:ed:82:28:fa:79:aa:
                    10:8a:b8:30:08:a8:7e:49:82:cb:f9:00:b3:ea:90:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:40:A4:67:93:69:0A:57:81:1A:59:CC:1F:0A:EB:01:5D:0E:9F
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZWFApGeTaQpXgRpZzB8K6wFdDp8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:f8:7f:dd:06:03:0f:81:ef:6f:e6:a8:a6:80:10:18:ba:
         7b:a7:eb:95:f8:55:ac:a8:9e:6c:41:09:9d:ab:32:4c:53:5a:
         7e:cc:90:8c:b8:ba:5f:b9:dc:01:ac:54:24:58:c6:53:8e:ea:
         27:bb:da:20:57:a4:5b:f6:c2:98:4a:c4:d1:91:77:4a:c2:f0:
         d8:f3:c1:3e:0a:8f:7e:bc:c3:53:8a:3d:ba:7c:ae:a0:70:e1:
         1a:1b:60:e4:30:a5:86:8c:2c:ca:de:f1:40:df:69:e2:e8:f8:
         fa:61:bf:63:01:dd:1e:da:81:35:a7:00:02:63:17:7f:7c:be:
         58:3a:09:8c:6e:00:2f:b1:d7:59:d8:f8:ce:42:fc:40:9e:d2:
         18:52:7b:9b:2f:6b:a7:f6:11:83:09:f1:30:b0:a7:81:72:29:
         9b:fa:2e:1b:c9:ce:53:71:e0:c3:b9:75:8c:7c:69:bf:36:11:
         a7:a0:96:52:e6:b4:39:71:27:7a:79:de:2d:ad:d9:c2:d4:bf:
         5a:a7:3d:ba:22:c9:94:15:b3:a8:eb:9e:6f:7c:86:81:37:84:
         b2:4c:2e:98:a6:3c:7c:a8:bc:0d:6f:8b:86:7a:4c:8e:a4:05:
         8f:3b:7d:9f:1c:f7:42:7c:a3:03:2e:f6:47:5b:21:c9:34:83:
         ad:15:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----