Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa
File:                     81WQE-YjndINucL5LLYyxHjLDHQ.roa (raw, json)
Hash identifier:          FK6rMK0BnNb1EgLQbhR/OWDj2lkjAFdlJwofudAw7i8=
Subject key identifier:   F3:55:90:13:E6:23:9D:D2:0D:B9:C2:F9:2C:B6:32:C4:78:CB:0C:74
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0D5C
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa
Signing time:             Fri 01 Sep 2023 08:51:23 +0000
ROA not before:           Fri 01 Sep 2023 08:51:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131658
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3420 (0xd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep  1 08:51:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F3559013E6239DD20DB9C2F92CB632C478CB0C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:ac:82:8e:33:25:4d:a2:a5:fe:ee:cb:b1:
                    1d:9d:d0:cd:4c:f2:b2:40:f9:a9:84:a4:2f:2d:6b:
                    15:29:be:52:98:56:e8:c1:01:ba:32:a7:b4:7d:79:
                    df:85:d1:b5:48:be:31:3c:a3:17:46:9e:6b:b0:4e:
                    ce:21:d3:5c:e9:1d:3a:4a:9e:56:20:9f:17:1f:66:
                    7e:91:d4:25:db:b3:35:33:b4:56:91:ae:8d:02:39:
                    d0:a6:22:3f:b8:b9:de:2c:a8:1c:c9:61:e3:28:64:
                    10:cf:ce:b4:c7:bc:79:47:11:d1:3c:f2:ad:71:1e:
                    7a:61:05:01:a3:15:e0:26:ba:c7:79:68:b2:05:80:
                    40:17:9d:ed:f9:dc:63:8e:78:ef:12:22:c1:dc:95:
                    8d:0a:ce:00:97:c5:40:a2:e0:22:4b:22:c9:4e:72:
                    68:9d:f1:c5:67:b5:fa:00:d5:8b:ce:1d:fb:cb:5f:
                    92:49:7e:32:ca:8c:e6:b5:44:6b:56:c9:74:be:96:
                    39:93:8c:cd:1f:d7:99:46:33:5d:2f:1a:2a:00:ba:
                    ce:55:80:37:f1:3f:28:12:6c:fd:fc:93:a2:45:ee:
                    cf:db:9c:78:37:1b:ee:41:85:e4:e8:7b:cf:fb:86:
                    3f:c9:8b:2b:d6:83:7d:5f:12:ab:69:60:d4:6d:6f:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:55:90:13:E6:23:9D:D2:0D:B9:C2:F9:2C:B6:32:C4:78:CB:0C:74
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:67:27:2c:d1:2b:41:61:cc:50:b7:67:0c:d2:b9:14:04:
         01:80:71:51:da:92:0c:7c:ae:29:f1:d0:5c:86:a3:cc:aa:a0:
         bd:f4:a7:a7:77:76:56:b7:04:92:4c:5f:9a:43:9e:6e:73:e1:
         b6:9b:c2:8b:83:ca:37:a3:9f:de:33:83:59:89:25:de:7c:b7:
         66:ae:64:f5:98:ca:ae:85:d3:ad:5d:22:af:84:5b:fc:ff:93:
         98:16:e2:74:b0:f2:79:45:13:93:a9:fd:12:24:1f:3a:26:ef:
         0d:b3:47:63:9f:73:6e:18:99:73:f1:67:dd:f3:4c:6f:4b:0b:
         93:08:f4:fa:75:cb:db:92:46:43:bd:f7:63:22:59:ba:77:b1:
         91:d5:c5:e0:d5:71:67:da:9a:ba:31:d5:29:47:31:3f:26:48:
         90:07:0d:e6:ac:8b:89:00:7e:91:ae:4b:4c:4e:d3:81:8a:90:
         2b:66:3a:9c:b0:50:51:99:3b:92:02:da:9e:ee:76:81:e7:8a:
         38:7e:cc:7b:87:ba:16:f5:de:f3:d9:eb:72:56:54:ea:3c:d8:
         4a:c0:75:af:6d:7c:23:f1:48:1a:56:87:0a:ff:e0:68:e0:4e:
         70:77:a4:fa:a1:19:2e:09:ec:e4:b6:64:e0:b0:8e:7f:f6:22:
         99:ee:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----