Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa
File:                     rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa (raw, json)
Hash identifier:          Aq/bNFcYAg6P3wY/jg6vqNTwI3h3hiwhxttYi3FHjQE=
Subject key identifier:   AC:35:AB:C4:05:F8:90:78:4B:1B:42:37:5C:41:B5:6F:37:71:09:76
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0DBC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa
Signing time:             Mon 15 Jan 2024 21:30:29 +0000
ROA not before:           Mon 15 Jan 2024 21:30:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9922
IP address blocks:        124.218.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3516 (0xdbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:30:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AC35ABC405F890784B1B42375C41B56F37710976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:74:1a:83:13:04:26:56:78:68:79:10:17:
                    fe:4e:dc:d1:76:4e:14:2b:e6:ae:5c:b4:94:7d:f8:
                    47:ed:b5:5f:33:97:6e:4a:45:74:ce:1e:16:09:d0:
                    f1:c8:2b:6b:6a:27:65:4c:85:6c:28:74:03:ba:20:
                    a7:30:6b:89:ec:65:1f:5d:de:bf:72:d5:ac:5c:5a:
                    ec:56:06:35:9c:52:09:12:ed:8f:e5:38:60:df:c2:
                    4d:12:dc:d1:26:e2:70:98:d1:aa:6b:14:a1:00:5d:
                    95:4a:5e:a6:b4:42:8c:e9:b8:39:93:16:15:23:6a:
                    27:8c:c3:c9:ab:10:50:d5:01:18:b8:f5:cf:57:69:
                    8e:21:70:8b:72:8a:67:e2:2c:89:a5:68:48:48:28:
                    6d:5e:50:16:98:9f:5b:91:45:6d:87:86:5d:3d:af:
                    04:0a:04:f1:4d:4e:b7:bb:f1:d9:a7:80:ab:47:bd:
                    8a:43:ba:f6:67:3c:d6:d9:6d:db:4a:05:5b:f2:f3:
                    e2:2c:40:5c:cb:9b:ef:74:8b:c0:89:31:46:d4:94:
                    6f:cb:af:f1:10:9b:59:a3:51:c0:d0:3c:ec:0a:9a:
                    d8:58:17:c8:6b:82:d0:39:55:5c:6b:f4:ae:33:b4:
                    b5:76:4e:6e:81:60:c0:a8:16:69:6e:bc:35:33:f8:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:AB:C4:05:F8:90:78:4B:1B:42:37:5C:41:B5:6F:37:71:09:76
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.218.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:46:67:05:c4:65:5d:ba:af:0f:16:5c:f8:93:e8:ac:9e:a1:
         7f:9d:6f:55:e0:c2:b1:c5:ef:3c:a9:de:cd:d9:8b:e6:bb:fc:
         3e:72:b5:3f:53:42:d1:c7:cb:07:8c:21:55:dd:5e:0d:6f:29:
         12:80:e3:ca:28:16:9d:59:4a:88:5f:09:f9:17:1c:f4:2d:c3:
         d2:ee:ec:02:b2:9e:45:ae:52:3d:6c:44:a2:3a:d7:41:e7:f2:
         54:44:34:21:32:f0:8e:1b:cc:9e:a6:c6:57:ff:06:59:37:0a:
         7b:04:de:00:e5:17:b3:c5:34:97:c5:ec:c1:2a:4e:bc:38:27:
         3e:b4:5c:23:f7:0c:2b:df:fb:fb:21:27:e8:4f:43:ff:73:b2:
         f0:3a:8c:1d:20:69:be:ea:8b:2a:b4:34:bd:d5:bc:40:a9:4f:
         8a:ad:c9:aa:21:ca:30:18:18:ca:d3:b7:28:d2:b9:bf:04:d1:
         2b:c8:58:73:72:ea:7a:51:a8:48:9a:85:36:f9:5b:05:95:a8:
         23:31:fd:1e:79:3d:8e:b6:22:44:b4:27:a2:66:75:a1:5d:74:
         a3:a1:16:eb:1e:80:f8:06:07:13:4d:32:ee:58:e4:81:ce:63:
         04:f4:bc:24:e0:94:b7:fe:55:83:ea:96:e3:98:8b:42:ae:d6:
         12:38:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----