Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa
File:                     lzuCs6TKsS_EbjraDzg7I_Li3vM.roa (raw, json)
Hash identifier:          yu31k4BWNziN4uwA5b1kfwTeF03clQVPfGAAXPFkE5I=
Subject key identifier:   97:3B:82:B3:A4:CA:B1:2F:C4:6E:3A:DA:0F:38:3B:23:F2:E2:DE:F3
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       0571
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa
Signing time:             Fri 01 Sep 2023 08:59:48 +0000
ROA not before:           Fri 01 Sep 2023 08:59:48 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        2406:48c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Sep  1 08:59:48 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=973B82B3A4CAB12FC46E3ADA0F383B23F2E2DEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b5:a0:b1:98:95:5b:62:20:a0:30:31:33:44:
                    4a:76:1b:9f:74:50:54:e5:ea:26:69:62:75:cd:d2:
                    e5:de:3f:db:58:b5:03:22:e6:d0:d6:7f:19:cf:7e:
                    86:85:e5:2c:02:a8:70:eb:0b:ab:86:01:5f:9e:1b:
                    d6:cd:3a:20:d3:d4:03:6c:4f:ec:4a:d2:a4:ca:a0:
                    f2:23:6d:70:7e:27:07:03:c8:7e:16:dc:76:0f:35:
                    81:61:1e:65:91:36:a0:17:bb:aa:cd:22:6e:7e:29:
                    01:79:37:f6:90:89:7c:55:1e:c2:9e:57:8f:b2:27:
                    32:51:42:15:d5:46:82:04:39:60:7a:8c:c6:78:6b:
                    91:91:92:ad:59:9c:ed:e1:35:4e:6d:f1:a8:57:9f:
                    02:e7:0a:f8:cc:67:7a:05:3a:44:ee:8d:50:2f:2f:
                    52:73:3b:22:97:66:bb:98:61:ef:e3:a1:77:81:17:
                    61:6d:95:1d:f5:1b:a8:c4:2e:55:09:1a:1c:66:56:
                    5c:1c:e8:56:51:17:5b:70:3c:97:44:85:c2:e9:c0:
                    8a:f7:b4:41:9e:35:b6:b7:f5:76:3e:20:c6:a6:32:
                    ee:a1:0b:5a:53:70:6e:dd:e2:d2:a0:8f:ef:60:e0:
                    dc:73:eb:6b:cd:3c:8f:47:08:ea:f5:57:2e:00:21:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:82:B3:A4:CA:B1:2F:C4:6E:3A:DA:0F:38:3B:23:F2:E2:DE:F3
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:15:bc:74:f3:c2:e8:d6:40:43:1f:c5:ce:b7:26:ea:8f:77:
         84:4b:8f:dd:3b:d6:f4:81:8c:72:49:96:7e:8a:ce:10:17:7d:
         6c:4b:b8:ab:c1:a5:68:c5:72:4b:aa:f1:5d:fe:6b:45:fe:33:
         44:ef:17:63:a9:e7:fb:a0:1c:cd:13:ed:f0:85:cd:1a:37:23:
         a7:07:a7:2c:83:42:99:29:bb:ea:0f:41:21:dc:f6:5c:ef:0b:
         cc:29:5c:cd:4d:1a:95:ad:f7:6a:8a:0d:16:7a:6f:b6:b2:19:
         f4:30:e2:4b:e4:50:e3:2f:c5:b9:24:d1:63:2c:2a:8e:ba:9b:
         26:5d:70:28:ba:0a:61:5c:a1:83:51:e1:eb:67:bf:21:dc:ce:
         1e:87:7d:d6:93:66:d5:16:92:7f:03:f0:ec:43:74:20:c1:21:
         d9:b4:1c:9b:44:55:65:09:ba:52:4c:67:85:6c:ce:b4:1c:00:
         d7:ad:b3:a9:e8:ae:16:ac:f5:56:75:2a:79:4d:78:7d:e3:96:
         c4:3a:c3:f5:b0:1b:df:1a:06:d5:6e:d5:d6:4e:2e:43:16:40:
         47:18:e3:15:4c:ea:90:84:fa:6c:75:6c:2c:77:8a:1b:43:21:
         b1:7e:49:33:3c:7f:b9:bd:a0:4d:27:22:b7:da:27:c8:9a:50:
         dc:05:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----