Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa
File:                     c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa (raw, json)
Hash identifier:          b7I8HjDPcttx50cMg52oP9C5aisP4WcEbzQ1EOk+2sM=
Subject key identifier:   73:B2:A8:E4:A9:04:F2:C6:49:EC:85:AE:0C:13:3F:3D:C8:4B:0C:CD
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0E4C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa
Signing time:             Tue 16 Apr 2024 09:19:58 +0000
ROA not before:           Tue 16 Apr 2024 09:19:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18419
IP address blocks:        218.34.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Apr 16 09:19:58 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=73B2A8E4A904F2C649EC85AE0C133F3DC84B0CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:80:2e:0b:34:3d:f1:89:f4:cb:da:3e:c4:
                    9d:0f:91:b7:a3:28:e5:9a:b5:11:7b:82:9a:c7:1d:
                    7e:5e:e2:fb:38:11:18:4b:88:eb:30:2c:d5:c5:8e:
                    67:37:eb:08:a2:70:86:01:40:a6:cb:eb:81:fa:11:
                    e6:ef:73:c6:f7:46:2d:e9:cc:68:02:07:0e:75:21:
                    e2:bf:2b:f9:2f:7e:a4:95:8e:3b:9f:21:dc:93:05:
                    6b:89:b8:9e:ec:3a:c6:aa:ec:7e:73:33:19:aa:a6:
                    2a:4b:e9:10:af:a4:29:e4:ce:a7:fb:e0:c2:9c:55:
                    42:52:af:c0:6c:29:5c:7c:21:79:a8:ec:17:0e:09:
                    5c:55:ba:43:8c:03:fe:15:13:8d:60:e4:c7:c8:88:
                    d7:fa:d3:b7:0c:f4:40:24:a4:00:b9:9d:77:1f:99:
                    18:e0:1b:5e:aa:bf:01:ad:e0:d6:45:fb:f2:a5:89:
                    0f:cd:d2:67:ee:a6:08:5d:3f:f6:a3:b2:61:47:4c:
                    4f:00:99:72:f4:82:f2:c9:6c:db:78:9b:55:03:e0:
                    68:b9:a1:e0:69:e8:b3:e2:18:1c:69:6a:5e:e1:a5:
                    f9:d0:37:c0:75:fe:80:e5:f3:2a:dd:74:bd:c6:c7:
                    ef:56:50:ab:a9:6d:a0:b7:68:27:57:b6:3e:94:f5:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B2:A8:E4:A9:04:F2:C6:49:EC:85:AE:0C:13:3F:3D:C8:4B:0C:CD
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.34.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:95:39:9a:83:a4:65:e1:3f:6d:51:94:f2:24:de:22:68:
         e9:68:21:24:2a:9f:dd:f4:aa:62:f2:e0:39:e5:2c:5a:a8:05:
         92:23:74:03:1f:15:d5:dd:b6:a3:6a:8e:a7:7c:9f:d5:b3:40:
         3e:ca:94:12:f6:02:de:a8:b7:a4:d7:ff:9a:f2:b5:8e:1e:b0:
         9c:f4:62:57:4f:9a:0e:5a:f8:44:31:7a:17:e9:b9:ac:4a:bb:
         fd:af:86:8c:73:dc:bc:bc:24:1f:7b:63:bb:ee:bd:76:ad:2a:
         bf:3f:0d:b0:fd:db:f5:ea:10:16:3a:a0:5c:03:fa:1d:5e:3f:
         b0:52:24:9c:d4:d2:ca:ad:76:86:6b:7c:28:dd:2d:6b:47:bb:
         7f:74:75:a9:4f:0f:44:eb:22:62:65:72:21:61:64:58:ba:85:
         12:b0:4e:87:65:03:13:4d:b5:f6:9b:af:6f:e5:e0:9f:ba:de:
         e8:af:9a:47:be:06:33:70:d0:66:21:9a:5d:b9:16:c9:9d:12:
         0b:c9:f7:ec:d2:88:72:4f:ce:40:8d:a3:39:b7:0b:0c:17:6f:
         8b:fa:77:36:fc:cb:1a:2f:82:ee:e0:e5:ec:0d:1a:41:fe:a4:
         04:f6:50:43:17:75:5b:b1:91:cc:80:0e:79:b1:df:8a:71:9d:
         48:1b:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----