Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa
File:                     w5QJQjbDArCvLIUZfmAwLuiO84o.roa (raw, json)
Hash identifier:          bYedepLpQbk2SjweWE3XkQFBiOF+npq3ByiJWmFc9hY=
Subject key identifier:   C3:94:09:42:36:C3:02:B0:AF:2C:85:19:7E:60:30:2E:E8:8E:F3:8A
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0CBC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa
Signing time:             Mon 15 Jan 2024 21:10:55 +0000
ROA not before:           Mon 15 Jan 2024 21:10:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        210.202.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:10:55 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C394094236C302B0AF2C85197E60302EE88EF38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:7f:98:c3:84:eb:14:d5:76:2c:76:03:19:
                    fa:36:da:3c:67:ea:33:32:c0:b0:ff:0b:74:55:32:
                    cb:d6:36:0e:3d:e9:a5:f9:50:bc:48:42:78:f3:99:
                    e1:70:7d:86:c2:ca:4f:ba:6d:da:f4:d7:8b:49:19:
                    62:37:51:a3:38:67:0e:47:13:23:8d:5a:1e:f5:59:
                    da:fd:34:77:eb:dd:d9:95:99:f2:0a:a7:a8:a9:0b:
                    19:1c:62:d3:63:06:9e:f6:27:e2:39:d3:db:03:17:
                    7b:4c:f8:c8:ec:15:04:27:5b:9b:11:f8:27:61:b3:
                    5b:34:11:f6:f1:ce:71:eb:f1:cd:d7:64:bd:90:07:
                    59:6c:67:94:b2:96:2f:40:58:94:43:24:35:b2:2b:
                    5e:0c:33:f0:8d:00:a5:11:23:de:59:aa:0d:cf:e3:
                    d7:8c:63:77:8a:13:6c:08:81:3a:16:b7:15:f9:af:
                    c8:6a:33:15:76:e2:e0:bc:97:15:f2:84:a9:b5:8b:
                    b2:94:65:2f:98:61:7a:80:d4:e4:ff:30:a9:78:ed:
                    17:fc:9a:a9:e2:57:86:67:61:d9:ef:4e:93:28:15:
                    4b:4c:56:c0:08:ca:44:f8:e0:5e:71:7e:42:8b:d4:
                    79:39:cb:33:77:e2:1e:af:11:7b:38:6d:42:f8:6f:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:09:42:36:C3:02:B0:AF:2C:85:19:7E:60:30:2E:E8:8E:F3:8A
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.202.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:ec:82:67:f7:77:30:af:1e:35:3f:4c:f0:aa:a5:34:be:
         d5:3c:e2:b3:8a:4b:45:50:f0:84:6c:a4:8e:7f:be:0c:ce:ba:
         16:26:3e:ce:d5:a0:4f:ae:04:35:21:7a:ec:1d:59:18:d2:0c:
         22:59:6b:7a:09:a5:bf:97:9b:ed:46:55:de:bc:75:ec:6e:e0:
         b3:b8:6a:f2:cb:62:dc:11:29:04:1a:98:bb:d2:2c:95:b1:f4:
         3c:5a:8d:01:10:e0:ea:0b:d5:c1:e6:9d:21:5e:6d:f7:53:8d:
         e8:43:b2:63:e6:e1:95:f0:f5:3f:2d:0c:e3:30:3f:d6:7f:e2:
         13:b7:cb:3b:6e:77:9b:63:f8:ef:bd:cf:94:fd:6c:63:ab:7a:
         db:68:8d:15:5b:80:f8:dd:98:10:14:0a:12:ca:29:e9:38:2f:
         2a:63:17:d6:45:1e:95:3f:66:73:a2:8d:63:b1:71:f1:96:b2:
         25:4c:a1:37:1b:26:61:42:6b:86:ee:e9:b0:c8:43:1a:34:73:
         76:0d:3f:18:93:eb:76:81:d5:c4:af:c9:01:7e:b7:e0:08:d6:
         14:99:0a:8c:26:42:3e:0c:a2:3d:86:4e:b6:c2:15:de:02:ab:
         1a:47:38:5e:e5:7e:a4:12:31:e8:f3:c8:73:8b:a5:ea:43:9e:
         c2:4b:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----