Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa
File:                     LSJMjS071AKGJTf7KQ65fuA7IuM.roa (raw, json)
Hash identifier:          AP221pT8lDYY1DTCIzlz4D6XOQDuCg9KmcbVIpQZLpA=
Subject key identifier:   2D:22:4C:8D:2D:3B:D4:02:86:25:37:FB:29:0E:B9:7E:E0:3B:22:E3
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       173A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa
Signing time:             Wed 12 Feb 2025 01:36:31 +0000
ROA not before:           Wed 12 Feb 2025 01:36:31 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     3462
IP address blocks:        61.218.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5946 (0x173a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 12 01:36:31 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2D224C8D2D3BD402862537FB290EB97EE03B22E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:4b:4e:d9:03:21:ab:44:55:78:b9:72:75:
                    66:b1:1e:dc:c9:0f:96:29:4c:a8:b6:cd:57:20:71:
                    16:fd:74:82:f1:d7:c8:d1:47:6f:83:0d:9a:8c:49:
                    5b:40:b8:71:9f:dc:87:5c:80:51:7b:be:bf:51:86:
                    7f:e6:60:44:47:38:28:4d:d6:9d:4d:41:28:8b:15:
                    c8:44:fc:e7:a7:88:47:be:87:01:fd:e3:9e:9b:4e:
                    46:70:20:da:07:08:b5:38:2b:b7:96:fc:9f:7b:36:
                    20:de:76:81:ee:06:05:de:f5:f1:50:db:74:4d:2b:
                    4b:90:25:f3:fd:ea:30:61:53:bc:5b:9f:12:99:e0:
                    87:4c:44:b9:83:1f:40:bc:c2:50:ff:d5:e4:3f:68:
                    9e:11:0d:c5:2d:12:ae:a0:c0:56:80:02:b7:b3:2a:
                    9d:e7:fa:49:2d:2d:a8:15:51:52:69:08:d4:71:9a:
                    c3:94:a5:03:70:f7:d1:38:04:73:b2:15:3e:3d:6b:
                    13:9b:a1:51:74:c3:f5:58:e8:4d:5e:9e:e7:80:4a:
                    7f:81:82:11:e2:f0:15:75:e1:32:35:ee:20:77:f9:
                    5f:93:bd:f2:09:6c:57:cf:f6:84:2d:23:57:60:fd:
                    da:57:c2:8c:ba:04:b6:5f:c2:1e:d8:3a:2d:37:2b:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:4C:8D:2D:3B:D4:02:86:25:37:FB:29:0E:B9:7E:E0:3B:22:E3
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LSJMjS071AKGJTf7KQ65fuA7IuM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.218.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:e2:cf:d4:97:c1:be:12:20:11:c0:a3:06:f1:f6:31:22:
         0d:46:8b:b1:b6:01:82:be:c6:db:64:36:83:a0:26:e7:1d:fa:
         7d:c2:c1:52:49:41:ff:95:9e:31:5d:ed:76:d9:31:78:d1:13:
         f6:2f:55:65:be:63:02:f8:4e:58:6f:5d:13:2c:81:84:f1:36:
         7f:25:12:32:ed:0e:06:1e:58:33:67:0a:24:33:7f:f2:c9:9e:
         f7:83:ad:20:4f:83:ba:ad:6a:d4:3b:f1:c1:6a:ec:a5:b1:7d:
         0f:37:48:11:45:7e:80:88:bc:ef:6f:68:9c:0f:e0:23:b5:2c:
         c0:3b:df:13:29:a9:d1:11:0f:88:e9:e7:42:6b:ea:83:7e:9b:
         b2:af:61:a6:32:1d:a6:ae:69:d7:d8:b3:13:30:03:88:ed:96:
         58:f5:99:bc:ae:4e:c8:4d:31:17:fd:85:20:42:b0:0a:d2:e5:
         b4:20:2d:0d:83:d9:dc:79:63:ab:22:cc:5c:8d:f1:16:3c:6e:
         68:11:71:fe:b0:7d:86:4c:23:be:6e:68:6e:a1:2e:c4:ae:d7:
         e0:72:6f:54:71:e9:b4:80:9f:16:76:f5:1b:f5:3f:7b:d5:69:
         50:bd:6d:8e:8f:7a:9c:06:4a:d0:bf:2a:20:b9:0a:38:35:d9:
         63:3a:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----