Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa
File:                     iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa (raw, json)
Hash identifier:          gcK7vHMcWl1akgykNS4OEN8/D7a9aEmD+Dq/WrnLjl0=
Subject key identifier:   89:16:60:CD:07:D3:68:D8:F4:CF:E0:5B:52:56:FF:68:20:3C:40:D4
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       056D
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa
Signing time:             Fri 01 Sep 2023 08:59:47 +0000
ROA not before:           Fri 01 Sep 2023 08:59:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     20473
IP address blocks:        2406:48c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Sep  1 08:59:47 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=891660CD07D368D8F4CFE05B5256FF68203C40D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:01:1d:62:06:60:3c:27:28:01:4b:95:b8:
                    1e:68:51:1e:11:5f:98:70:ff:99:f1:4f:ff:44:55:
                    05:0c:05:79:62:c0:48:25:3d:ec:a3:39:f8:b4:dc:
                    d9:27:53:a3:58:47:26:5b:e4:3f:ff:26:40:57:9f:
                    09:da:fa:8d:23:55:23:be:a5:4d:9c:07:71:23:c6:
                    f7:d9:43:85:6a:92:49:35:df:14:09:29:77:20:22:
                    70:80:c0:11:20:5c:48:19:71:f2:fb:4e:bb:50:8a:
                    5e:4c:5e:6f:f5:70:47:de:a0:f1:b4:e9:6b:00:3f:
                    d0:40:5c:14:9c:ac:e9:c5:a4:c4:f5:b6:47:91:10:
                    95:59:35:7f:50:3f:e8:b6:88:16:d0:86:21:8f:db:
                    ed:86:71:d1:d4:37:4f:1f:07:41:04:98:81:2e:7f:
                    02:ea:33:b5:00:e2:93:ef:bd:d9:b1:84:3c:9f:7e:
                    23:26:03:e0:39:7c:b0:60:92:0d:f2:52:e4:d9:f9:
                    be:7a:f8:b2:dd:96:32:49:a4:6f:07:b7:5c:f2:d9:
                    8f:3e:da:61:34:44:47:84:20:b3:c9:6e:a3:b1:ea:
                    de:82:38:4e:e7:e1:86:82:da:d1:ec:56:2f:c3:8a:
                    52:66:b3:66:3d:c2:19:e9:dd:a6:c5:ab:03:52:81:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:60:CD:07:D3:68:D8:F4:CF:E0:5B:52:56:FF:68:20:3C:40:D4
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:44:5b:76:9d:ba:e9:ef:0f:db:0d:bb:51:66:99:e5:8d:
         51:d7:c5:39:99:0e:1f:d5:2f:ec:bb:30:97:e1:09:08:28:89:
         aa:b6:84:b5:9b:87:0a:6d:e8:29:9c:fc:e4:0d:80:66:61:16:
         99:b0:33:65:42:d5:c5:b9:30:74:1a:31:26:5d:a1:60:5b:69:
         f2:9f:e8:65:27:e6:1a:7b:c4:e7:6c:b4:60:3b:12:64:33:ed:
         0a:1a:bb:f1:da:f7:dc:5e:12:15:0c:93:7e:5d:7a:d3:6f:90:
         fb:75:25:ac:a8:07:36:5c:33:97:fc:59:92:22:dc:f2:0d:a6:
         d5:53:d5:9e:40:68:a4:0d:73:07:4d:2b:70:35:e1:cd:25:e8:
         2c:3c:9e:32:c4:40:b4:8a:8f:c5:03:92:ae:05:d3:7e:cf:fe:
         11:c0:57:1f:da:fe:c0:45:67:3a:ea:62:82:d6:62:eb:6c:b9:
         dc:43:6f:19:97:77:21:13:08:e5:3f:0b:2a:13:b4:77:90:3c:
         d2:f0:d1:2b:20:6a:f2:7c:1d:12:c0:45:e8:b3:ed:90:2c:88:
         72:da:f3:b1:7b:31:0e:f1:dc:78:ec:2b:7d:88:85:5e:2c:6d:
         c4:38:06:f8:78:45:46:96:b8:94:9c:d5:2e:f5:5b:0e:5a:43:
         21:f1:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----