Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa
File:                     mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa (raw, json)
Hash identifier:          LELcR5rfPgVdW3ihwP+GYE5qctjfSDZqPqrUVdKe5II=
Subject key identifier:   99:B7:7E:E0:3A:98:97:B8:61:4A:FD:7F:01:AD:9A:2F:83:DC:84:F2
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0DDC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa
Signing time:             Mon 15 Jan 2024 21:35:04 +0000
ROA not before:           Mon 15 Jan 2024 21:35:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        223.22.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3548 (0xddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:35:04 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=99B77EE03A9897B8614AFD7F01AD9A2F83DC84F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:d6:74:73:da:3f:a4:da:39:07:a6:68:40:
                    35:ab:1e:51:f9:09:71:0e:9e:17:0a:41:29:c6:4e:
                    c2:14:7a:fb:52:d8:b6:0f:f3:29:c9:69:5a:5f:68:
                    53:c3:4a:dc:39:14:ef:a6:cb:91:55:06:89:1d:8e:
                    64:17:27:6a:f8:38:27:d2:3e:56:42:ec:df:2e:ef:
                    c7:eb:35:54:26:9a:ae:70:dc:d3:fe:0e:6e:2f:74:
                    f2:6b:34:c3:70:f8:08:8f:54:5f:d3:3d:e3:3b:b0:
                    4a:d5:ce:d0:c1:9b:65:59:3d:65:3e:9d:0b:94:0e:
                    4e:4a:ab:a9:dc:5b:6d:4c:c3:c8:bd:c4:3c:ff:fa:
                    6c:66:1b:5e:09:09:39:b7:d4:b1:be:8d:f5:9a:bc:
                    4a:ff:06:8f:15:2b:49:0d:6a:34:af:85:78:e3:e4:
                    27:7e:88:f2:e7:9a:46:f7:92:0d:d0:75:4a:44:df:
                    3e:d0:dc:55:8a:cf:b2:57:ac:6e:73:38:de:5a:54:
                    36:49:e3:56:cb:fa:f1:47:56:d4:e1:83:e4:f2:54:
                    93:2d:52:c7:5c:6f:55:c7:67:fb:b1:41:01:29:10:
                    10:b7:aa:4a:07:ff:dc:80:25:5f:7d:e4:a0:1e:76:
                    d7:5d:be:f9:1e:46:9d:38:06:02:50:4d:6f:b9:a5:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B7:7E:E0:3A:98:97:B8:61:4A:FD:7F:01:AD:9A:2F:83:DC:84:F2
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.22.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         89:67:9c:d9:ed:7b:97:0e:df:00:4a:46:cd:cc:d9:a8:24:e1:
         89:c9:74:7e:15:bb:99:e2:d2:f5:da:2f:6c:14:3c:69:8c:74:
         70:77:fc:a9:81:79:e3:90:f6:55:1a:99:61:b5:81:df:c9:b7:
         72:0c:48:1d:7d:16:d2:c3:52:72:5f:da:c1:2e:8d:8c:2f:ff:
         e1:53:7e:22:8f:0f:24:88:71:ba:65:cf:d4:2f:63:d1:0d:25:
         35:c9:cd:60:4b:21:d4:23:66:18:32:9b:6c:74:bd:f8:d9:06:
         4c:5c:d0:13:04:11:32:25:a4:4d:85:9a:ad:62:b6:b2:c1:bc:
         40:be:1c:2d:88:fd:92:67:29:a0:db:12:3c:9a:f6:6f:5d:2f:
         f5:7c:96:af:42:6f:b8:05:b6:92:d1:91:ed:1f:75:85:1b:67:
         ae:19:d0:81:47:95:06:5f:cf:b7:80:31:82:92:6b:de:2f:cd:
         07:9e:98:aa:18:1d:76:4f:bc:7c:33:16:b2:c5:1f:61:dc:7d:
         f4:f0:57:3e:51:63:62:c9:ec:86:d1:5e:3c:b9:fa:8c:44:dd:
         1c:ac:b7:a7:e9:1b:41:24:07:e4:50:27:c9:4d:33:ab:f0:21:
         0f:ba:39:e8:0f:d8:f4:54:21:dd:46:9c:15:ea:a4:25:3b:8b:
         25:8d:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----