Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YDP4n57mP8eVzlTdxLi4n2huJvU.roa
File:                     YDP4n57mP8eVzlTdxLi4n2huJvU.roa (raw, json)
Hash identifier:          kYjYe7QXEug/eJtuUlohQ9NoeORWSO4uVDJcCy/98YY=
Subject key identifier:   60:33:F8:9F:9E:E6:3F:C7:95:CE:54:DD:C4:B8:B8:9F:68:6E:26:F5
Certificate issuer:       /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial:       0E8E
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YDP4n57mP8eVzlTdxLi4n2huJvU.roa
Signing time:             Mon 26 Aug 2024 05:18:58 +0000
ROA not before:           Mon 26 Aug 2024 05:18:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     134823
IP address blocks:        2404:a3c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Validity
            Not Before: Aug 26 05:18:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6033F89F9EE63FC795CE54DDC4B8B89F686E26F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:31:05:af:89:8c:a5:f5:e0:2e:0f:75:1f:
                    be:31:6a:48:83:9c:68:45:db:9f:c1:cf:19:ba:7c:
                    1a:71:7d:d4:e5:0d:aa:dd:92:22:1d:04:bb:7b:6b:
                    8f:be:d4:1b:13:2b:11:a4:04:2a:ef:62:a7:50:5a:
                    c9:f5:d2:dd:d0:09:64:f7:78:7c:1f:7d:03:5c:28:
                    c2:52:88:ba:bd:d4:c9:e9:93:40:ab:b9:7b:a1:0f:
                    8c:a5:31:33:23:c1:a6:a0:48:e7:c7:22:dc:f9:6f:
                    25:41:0c:cd:3c:d3:8b:38:24:cd:02:30:85:27:6c:
                    90:91:4d:59:57:61:f1:e7:03:26:f4:87:f1:4c:f7:
                    12:65:85:25:39:f2:18:9f:f5:88:53:da:d2:96:d5:
                    f9:44:5f:c9:a7:dc:fc:58:db:05:48:6a:65:08:f9:
                    1b:98:da:0d:a6:5f:59:ff:e7:01:59:02:73:1a:68:
                    56:14:29:e5:ff:b6:16:47:d3:18:a8:88:55:89:e9:
                    d7:36:27:e6:ef:6a:35:bd:ab:d4:a9:8f:ba:56:10:
                    81:a3:2d:62:35:4f:0e:df:be:e6:01:86:98:bd:d4:
                    f4:3d:09:28:7b:d3:7d:75:f9:35:e2:2b:e9:46:8c:
                    50:40:e4:ad:c4:46:06:4b:79:55:72:1b:50:61:9a:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:33:F8:9F:9E:E6:3F:C7:95:CE:54:DD:C4:B8:B8:9F:68:6E:26:F5
            X509v3 Authority Key Identifier:
                keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YDP4n57mP8eVzlTdxLi4n2huJvU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:cb:9c:93:67:d3:99:af:42:95:74:79:49:e9:0c:de:e8:
         f6:af:44:30:f1:8d:5b:2c:05:14:48:ca:40:2f:8d:08:00:92:
         bb:79:be:88:5e:e7:29:b9:73:d2:b8:b0:50:b9:37:8d:f0:66:
         2d:91:a2:69:a3:44:d5:86:79:b6:62:48:01:16:b8:7a:98:f4:
         31:c6:98:0d:0a:c9:70:de:2d:09:13:45:3e:4a:4e:f2:91:f9:
         79:56:6b:c5:3a:6c:34:e7:b5:82:a2:ab:43:da:30:8d:67:3b:
         9e:29:ae:a8:27:f8:7e:33:32:66:a4:63:10:22:5e:51:91:0e:
         6b:70:1a:c7:5e:c0:f8:db:00:fd:8e:cf:1b:b9:f0:1e:92:e9:
         42:2d:f6:f1:f0:70:91:55:07:46:3f:90:c2:f1:92:96:fc:2a:
         8e:2b:71:8d:16:42:40:73:7a:3e:d4:be:3f:96:f9:8d:6b:99:
         be:b0:bb:01:fc:d5:4b:58:35:f3:d8:1d:98:18:0d:e8:00:db:
         40:72:ab:ad:3e:bf:cd:4c:7f:ac:25:be:7c:97:93:dd:56:e3:
         23:ad:b3:6a:16:70:3d:e1:9c:e3:6b:6b:f1:32:ce:e7:44:ce:
         38:24:a6:82:8b:06:06:61:bb:36:b7:f6:99:59:ef:5f:4a:63:
         7c:05:a9:8a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjFF
MEVFNzk0MjhCODVFREFCQjVGNkVCOTU3OEVGQjE5RTYzQzk4RjAeFw0yNDA4MjYw
NTE4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwMzNGODlGOUVFNjNG
Qzc5NUNFNTREREM0QjhCODlGNjg2RTI2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAojEFr4mMpfXgLg91H74xakiDnGhF25/Bzxm6fBpxfdTlDard
kiIdBLt7a4++1BsTKxGkBCrvYqdQWsn10t3QCWT3eHwffQNcKMJSiLq91Mnpk0Cr
uXuhD4ylMTMjwaagSOfHItz5byVBDM0804s4JM0CMIUnbJCRTVlXYfHnAyb0h/FM
9xJlhSU58hif9YhT2tKW1flEX8mn3PxY2wVIamUI+RuY2g2mX1n/5wFZAnMaaFYU
KeX/thZH0xioiFWJ6dc2J+bvajW9q9Spj7pWEIGjLWI1Tw7fvuYBhpi91PQ9CSh7
0311+TXiK+lGjFBA5K3ERgZLeVVyG1Bhmhw/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUYDP4n57mP8eVzlTdxLi4n2huJvUwHwYDVR0jBBgwFoAUYeDueUKLhe2rtfbr
lXjvsZ5jyY8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9V
RC9ZZUR1ZVVLTGhlMnJ0ZmJybFhqdnNaNWp5WTguY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1llRHVlVUtMaGUycnRmYnJsWGp2c1o1anlZOC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lNQ0xPVUQvWURQNG41N21QOGVWemxU
ZHhMaTRuMmh1SnZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQEo8AwDQYJKoZIhvcNAQELBQADggEBAFpXy5yTZ9OZr0KVdHlJ6Qze6PavRDDx
jVssBRRIykAvjQgAkrt5vohe5ym5c9K4sFC5N43wZi2RommjRNWGebZiSAEWuHqY
9DHGmA0KyXDeLQkTRT5KTvKR+XlWa8U6bDTntYKiq0PaMI1nO54prqgn+H4zMmak
YxAiXlGRDmtwGsdewPjbAP2Ozxu58B6S6UIt9vHwcJFVB0Y/kMLxkpb8Ko4rcY0W
QkBzej7Uvj+W+Y1rmb6wuwH81UtYNfPYHZgYDegA20Byq60+v81Mf6wlvnyXk91W
4yOts2oWcD3hnONra/EyzudEzjgkpoKLBgZhuza39plZ719KY3wFqYo=
-----END CERTIFICATE-----