Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa
File:                     pIqwevXAJfTNsAqbbWKTj1LXYRY.roa (raw, json)
Hash identifier:          eoIT8t+0Sw48wqRknx6D54n6EeMUnuuFeWjn+ygsYOE=
Subject key identifier:   A4:8A:B0:7A:F5:C0:25:F4:CD:B0:0A:9B:6D:62:93:8F:52:D7:61:16
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0D84
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa
Signing time:             Mon 15 Jan 2024 21:29:05 +0000
ROA not before:           Mon 15 Jan 2024 21:29:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        210.203.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:29:05 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A48AB07AF5C025F4CDB00A9B6D62938F52D76116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:e0:9e:64:74:24:47:43:ee:af:c0:bf:e0:
                    1e:1b:46:87:68:1b:11:c7:23:96:58:d5:56:ef:14:
                    d8:5a:cf:2f:ea:f0:20:29:85:99:e8:9a:de:a3:75:
                    0b:17:f0:3e:ee:b0:c3:c2:cf:ef:cf:00:98:6a:7f:
                    65:ae:19:15:97:52:3f:0f:70:ec:71:0e:a2:b0:20:
                    f5:38:c9:3b:b6:bc:dd:45:3b:37:53:3f:a9:68:ba:
                    01:b0:04:8f:78:70:9b:55:14:0a:79:5a:c5:79:7f:
                    94:a6:5c:c6:60:0e:2f:42:fc:e0:7a:46:2a:4a:2a:
                    5b:3c:8e:93:a0:4b:41:8e:fc:15:32:82:3b:fd:d8:
                    bc:e9:bf:75:d4:d6:12:16:2a:2a:7c:6a:29:53:e1:
                    a0:00:e2:d9:c3:c5:d6:54:21:09:42:94:c8:d9:c6:
                    19:f6:65:d1:62:28:52:50:af:43:c0:e0:04:e0:cd:
                    a1:fa:83:db:69:07:67:4e:3c:d9:78:42:6f:5c:a5:
                    e8:c5:7d:76:ff:f7:47:81:8c:87:0d:26:ba:17:95:
                    64:e6:aa:25:56:1a:5e:6c:0e:4b:48:eb:d5:ba:74:
                    73:bf:a0:cf:e2:4e:3d:c9:65:f6:44:a7:d7:44:8a:
                    48:99:cd:a4:ef:c2:1a:cc:1a:91:07:80:fe:89:e4:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8A:B0:7A:F5:C0:25:F4:CD:B0:0A:9B:6D:62:93:8F:52:D7:61:16
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:7a:3d:01:ea:72:ab:56:f8:a0:a3:3d:77:9f:52:ab:5a:
         a0:82:53:be:a4:64:39:e4:7e:c7:1b:d1:16:ba:49:10:f0:68:
         e0:0a:a2:62:c4:cc:eb:81:64:f2:16:05:4e:85:bf:e9:5c:fe:
         a1:bc:68:bf:f8:9a:b8:41:8b:9d:3f:79:37:79:3e:e3:89:ce:
         f5:e9:9d:01:d9:22:71:65:fb:97:6a:c3:13:fc:c2:20:8f:ad:
         4c:5f:f7:66:6b:6e:0a:b7:dc:2f:18:11:43:4f:63:d9:0c:a8:
         0f:b8:81:16:8c:02:cd:c4:be:25:30:ef:5b:62:d7:7d:61:8c:
         fe:ae:2b:29:0f:40:c9:f0:33:c5:c4:3f:c4:c2:9a:73:67:d6:
         15:73:e3:69:6d:2f:e6:65:01:29:5a:ed:aa:df:bb:ea:92:2e:
         06:e8:bc:58:94:70:de:cf:05:79:9f:13:c8:a2:d0:a1:0d:d6:
         34:85:b3:ea:57:9c:5e:82:20:48:a4:ff:a2:12:25:39:99:da:
         c9:7c:ef:be:ac:7b:00:3d:19:a1:bb:b4:07:64:1c:c5:f9:d7:
         ce:0c:82:23:8f:85:2b:1b:77:e6:7d:51:25:e7:34:d7:48:24:
         c9:5f:d3:9e:92:7c:3f:36:2a:03:98:a4:09:7c:e5:57:71:f1:
         a0:75:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----