Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa
File:                     XmRaIEak7VDdk-HzNx2j3grxJm0.roa (raw, json)
Hash identifier:          eqszs4owMf7fD/E4mjjudwU4tEzapx29Ka2grWZmphM=
Subject key identifier:   5E:64:5A:20:46:A4:ED:50:DD:93:E1:F3:37:1D:A3:DE:0A:F1:26:6D
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0FC2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa
Signing time:             Fri 01 Sep 2023 08:57:27 +0000
ROA not before:           Fri 01 Sep 2023 08:57:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     15133
IP address blocks:        2001:b032:c101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4034 (0xfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:57:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5E645A2046A4ED50DD93E1F3371DA3DE0AF1266D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:a1:1a:2d:5e:b8:c5:6c:66:cf:d1:7e:cf:
                    e8:d0:83:a2:98:27:be:58:7e:4d:e7:32:8e:c5:cf:
                    e6:8c:67:e7:d8:c6:06:c8:2c:d9:6a:b4:66:87:c8:
                    6f:e0:4b:93:81:d1:5f:1e:48:f2:e0:f8:e4:59:16:
                    b0:d4:90:72:0b:a1:ea:75:d3:90:d0:3e:ee:eb:15:
                    90:40:6c:36:7c:0f:1d:cc:5d:d5:0d:07:1d:a2:7a:
                    52:75:02:2a:14:14:25:42:94:a6:bb:92:cf:e8:fd:
                    f1:61:e1:ba:e5:e9:1d:ba:3b:16:73:5b:b5:82:1b:
                    5d:2a:c3:d4:14:68:15:46:53:ea:7f:2e:34:9e:23:
                    2f:13:c5:f2:39:50:14:46:52:b3:1d:28:74:3c:03:
                    dc:f8:25:c1:84:d0:e5:4e:51:e2:cd:71:09:a1:bf:
                    b9:35:c7:d2:4d:f5:52:6b:79:a7:06:c9:a0:ee:ee:
                    f6:5c:44:5e:92:23:5e:dd:c4:00:4a:7c:14:71:8a:
                    fc:53:fa:3e:8f:6f:5c:50:ae:85:d5:d5:b9:fa:52:
                    91:e6:95:b4:5b:7b:a8:58:f3:b9:12:a4:b8:9a:55:
                    6b:e7:14:b9:13:8a:57:31:ef:2f:dc:1c:6e:a6:fa:
                    53:38:13:f3:36:d2:15:b2:7a:49:a1:a8:af:04:a7:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:64:5A:20:46:A4:ED:50:DD:93:E1:F3:37:1D:A3:DE:0A:F1:26:6D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XmRaIEak7VDdk-HzNx2j3grxJm0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b032:c101::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:b3:0d:5f:8f:a5:6a:aa:78:ba:f9:e6:91:db:7f:ee:a2:
         a1:44:84:8c:3b:74:4e:74:cb:3b:a3:52:15:dd:d7:c1:56:dc:
         82:0f:1b:e8:f9:15:ce:9c:38:eb:25:8c:aa:48:3f:77:9f:ee:
         29:3a:cc:47:65:3d:eb:1d:ad:0e:33:79:1e:b9:06:fa:a2:c2:
         b9:c1:37:59:a9:c8:09:b9:16:85:38:87:e3:6b:8a:da:58:fa:
         fd:8e:df:08:86:11:77:36:30:2f:af:81:d5:9d:d8:5d:8f:df:
         d0:79:c0:2e:a2:65:12:d7:d1:e0:96:91:66:69:df:1d:7a:d2:
         ea:7e:e1:3a:0a:19:ec:73:7b:37:51:39:cf:bf:02:de:51:5f:
         c8:7d:8b:0e:9c:4a:c7:ed:d1:c2:e8:df:5a:e6:8c:87:47:4a:
         08:7d:f2:95:f9:43:58:b3:af:92:b1:d9:e8:02:73:3e:b9:e4:
         e0:49:35:98:f2:e5:3b:26:26:48:34:96:e9:ec:f9:f8:d2:4b:
         da:09:11:52:82:71:e8:6a:a2:63:00:bf:65:e8:b5:97:f7:19:
         e0:8f:97:df:08:de:c9:2b:50:7b:9c:f0:b0:cd:83:93:6e:2b:
         90:22:bd:30:e5:8b:9f:29:c2:9c:01:20:ae:08:15:7b:59:e2:
         df:a7:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----