Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa
File:                     neGXyXsze1F0hIM2YDyH8wwV3U0.roa (raw, json)
Hash identifier:          KJuZbnVKXZTvD5sfdicZAS0/kLYLJpT8+oRE09iqjfQ=
Subject key identifier:   9D:E1:97:C9:7B:33:7B:51:74:84:83:36:60:3C:87:F3:0C:15:DD:4D
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0F85
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa
Signing time:             Fri 01 Sep 2023 08:57:10 +0000
ROA not before:           Fri 01 Sep 2023 08:57:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131660
IP address blocks:        2001:b000:591::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3973 (0xf85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:57:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9DE197C97B337B5174848336603C87F30C15DD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:03:aa:f3:b2:d2:ba:e1:56:69:a1:af:85:e5:
                    57:cb:14:b9:35:fe:2d:29:fa:04:e6:b6:66:d9:f7:
                    87:07:ef:38:2f:88:f0:77:05:16:9e:89:15:43:60:
                    2d:83:1e:50:0c:94:7c:de:ad:a0:a5:64:68:04:bd:
                    74:e7:11:1f:d3:4e:d2:22:2c:d9:28:eb:8c:63:a7:
                    be:59:9b:8b:32:73:66:a0:fd:d4:fc:89:ad:56:36:
                    cb:4d:0b:9d:2f:41:50:15:01:ac:40:43:d8:3b:2d:
                    bc:06:16:5d:02:53:59:21:8b:db:c4:a5:e0:3f:fb:
                    a4:26:1a:62:52:25:f5:bc:fe:7a:ee:41:ba:74:d7:
                    69:6f:f3:fb:a7:a2:d8:b7:78:68:b4:1b:98:c6:ff:
                    27:3e:35:f9:96:57:f9:08:2c:f0:f3:99:ac:3a:6b:
                    15:10:c7:ab:3a:16:88:d4:54:74:bf:8e:a0:a4:69:
                    83:e8:f1:ff:41:cf:18:6f:b3:43:97:5d:c4:df:74:
                    3d:81:f2:ed:7d:16:14:70:14:1d:12:53:cd:7f:ee:
                    8b:ef:49:74:b3:7a:a8:19:db:66:cc:50:23:0e:c9:
                    04:8b:43:ae:29:c8:16:d3:87:01:47:ff:0b:0f:40:
                    6f:94:34:5a:84:a9:a9:da:7d:d8:e4:1f:1f:78:32:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:97:C9:7B:33:7B:51:74:84:83:36:60:3C:87:F3:0C:15:DD:4D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/neGXyXsze1F0hIM2YDyH8wwV3U0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:591::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:82:2b:c5:5b:25:ed:ee:a9:47:1e:de:d9:d8:20:4b:bd:5c:
         2b:4b:78:55:ec:1e:a6:63:35:a4:52:c4:06:f1:3c:ea:26:f3:
         ae:54:09:57:40:82:10:5f:42:94:35:20:c8:ad:7f:2e:4a:bb:
         d3:69:4b:61:21:65:08:2f:4b:66:f0:2b:14:b8:54:f7:ac:9e:
         2c:56:c5:04:b9:4a:63:d4:be:cb:c0:30:ea:a1:48:f8:d9:a5:
         ec:82:62:5f:2c:98:29:b8:8d:52:b4:78:14:0d:e3:51:7f:ec:
         ac:77:21:29:76:f4:89:0f:24:23:3e:39:77:7b:9a:f3:34:e7:
         42:fc:77:38:6e:70:32:f2:63:9c:46:42:eb:bb:7f:21:02:ec:
         83:d7:62:fc:c7:01:78:2e:36:ad:09:56:4e:8e:1c:1f:81:e5:
         74:4b:3f:df:2c:c2:87:3f:b1:ed:fe:ca:08:5e:dc:2a:9b:90:
         52:69:3a:15:59:89:f2:14:1d:3c:49:22:42:00:e8:a5:8c:5f:
         af:68:df:ce:ed:44:d3:fe:a9:7b:60:32:fc:58:13:b3:4b:39:
         ed:cf:f6:cf:fa:82:39:d4:e7:c5:3d:4e:6d:d0:f3:c0:1a:9e:
         97:0e:3f:63:d5:13:6f:95:20:5b:83:78:f2:ef:5b:de:bf:6b:
         46:37:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----