Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/wmEVl-twlZAoAZY1fGjqDmpguJ8.roa
File:                     wmEVl-twlZAoAZY1fGjqDmpguJ8.roa (raw, json)
Hash identifier:          21d+ZPfsfZxVt81p1ix11dyuvbsJPnEiVttUKDJNijY=
Subject key identifier:   C2:61:15:97:EB:70:95:90:28:01:96:35:7C:68:EA:0E:6A:60:B8:9F
Certificate issuer:       /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial:       0739
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/wmEVl-twlZAoAZY1fGjqDmpguJ8.roa
Signing time:             Tue 29 Sep 2020 09:51:50 +0000
ROA not before:           Tue 29 Sep 2020 09:51:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        2403:81c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
        Validity
            Not Before: Sep 29 09:51:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C2611597EB709590280196357C68EA0E6A60B89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:ef:9a:f8:c5:49:12:b1:39:90:a0:c6:0a:
                    fa:ce:59:25:63:cc:83:75:6c:57:9b:c1:9e:44:f9:
                    5c:7d:b9:c7:c7:d1:0e:e6:f0:5c:66:9f:d8:a6:17:
                    cd:95:cd:c1:ea:f3:50:10:9f:f2:7f:9b:3e:ad:54:
                    0d:1e:24:e7:b3:3a:74:d1:5e:eb:79:1b:c4:57:82:
                    c4:33:dc:fa:a6:ed:b7:93:44:14:3e:94:87:d4:c5:
                    3d:3f:c4:af:74:2c:5d:79:01:e0:de:0b:22:ce:81:
                    93:f2:3b:c1:11:95:e2:10:33:94:82:08:5f:c8:d1:
                    61:49:23:7e:84:0a:62:83:b4:3b:a8:ab:f0:57:16:
                    c3:ba:dc:e4:4f:01:de:a3:05:c1:55:0c:e6:7b:2f:
                    01:e9:b6:24:64:b7:cb:17:06:43:45:8d:45:94:e0:
                    6c:8d:b0:76:30:d3:58:c6:5a:cb:37:f7:16:38:4d:
                    8c:0b:07:5e:a9:9e:6f:4e:34:5d:01:11:e2:9b:b4:
                    72:3b:84:bf:6b:74:c3:7d:75:a2:2f:cf:82:14:7a:
                    74:dd:ee:5b:00:24:84:c3:cd:2a:5f:1c:01:dd:cb:
                    dc:f0:04:98:1c:11:8b:08:a3:1a:57:1f:53:d7:33:
                    5e:dd:e3:c9:1a:5a:1d:c8:c7:c4:61:9d:ca:aa:34:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:15:97:EB:70:95:90:28:01:96:35:7C:68:EA:0E:6A:60:B8:9F
            X509v3 Authority Key Identifier:
                keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/wmEVl-twlZAoAZY1fGjqDmpguJ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:94:21:f5:28:b4:18:54:11:3c:05:cf:db:ac:2c:e0:e3:
         f5:cf:0e:55:7e:07:f0:cd:de:9d:15:2b:d1:6d:9f:14:37:15:
         8f:0c:50:e6:da:22:ef:2e:3e:21:2f:05:e0:2d:2b:07:af:2b:
         8d:25:a0:7d:41:0e:c0:c0:eb:bc:1d:8c:b8:4b:32:13:98:ed:
         d5:eb:bd:f8:d8:ea:b7:25:99:6c:d2:75:db:53:1e:bd:b7:f6:
         7e:b2:2e:da:42:b7:d4:b5:86:c8:63:f8:04:ab:43:7a:5d:8a:
         6c:81:17:78:44:ea:21:c0:f8:b5:64:cc:38:04:8a:80:8a:77:
         22:33:f2:62:91:e7:82:32:7f:c9:88:5a:cb:ad:ee:9c:7f:5b:
         7a:3b:37:fe:41:5b:6a:e7:a9:bc:06:c0:80:86:3e:8c:8c:6a:
         7f:4a:92:39:5d:96:f0:bb:51:07:0d:fb:73:0d:4b:43:9a:5a:
         e5:8b:d2:bd:ed:af:f4:98:73:b8:d7:ad:96:25:15:8b:25:b1:
         dd:bf:a0:d8:c7:2a:b3:e2:55:41:65:af:e8:6a:47:11:d4:8c:
         3e:6d:69:f2:8e:0a:93:5d:11:c3:1e:64:7b:69:60:ee:6e:91:
         55:87:6b:31:63:70:f4:bd:b0:b9:b3:57:89:a4:dd:99:04:4b:
         44:96:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----