Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/ycZIExdv_EfdFd7YyXRmDsmUQB0.roa
File:                     ycZIExdv_EfdFd7YyXRmDsmUQB0.roa (raw, json)
Hash identifier:          NkZHCnM+tCXFWBxHBmGi5sFgp78/dovZF6FRv2j3g+w=
Subject key identifier:   C9:C6:48:13:17:6F:FC:47:DD:15:DE:D8:C9:74:66:0E:C9:94:40:1D
Certificate issuer:       /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial:       0F
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ycZIExdv_EfdFd7YyXRmDsmUQB0.roa
Signing time:             Tue 05 Sep 2023 07:57:49 +0000
ROA not before:           Tue 05 Sep 2023 07:57:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18041
IP address blocks:        2401:16a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
        Validity
            Not Before: Sep  5 07:57:49 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C9C64813176FFC47DD15DED8C974660EC994401D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:27:c8:f8:67:87:5f:f1:4a:89:11:b6:75:
                    34:39:ce:91:9a:52:f4:d4:33:c6:4c:b2:6d:ed:31:
                    4f:00:90:79:ae:57:b8:3e:9d:33:65:34:a8:c1:09:
                    06:5f:1c:5d:4d:1a:8e:b4:eb:29:dc:fd:01:11:4f:
                    28:cc:bc:ed:a1:8f:da:aa:e4:b4:8d:ce:35:e3:6a:
                    ef:46:c4:04:b0:0e:a7:1c:e1:31:98:76:d2:61:63:
                    d6:4f:e7:84:0a:5f:df:06:64:c7:ce:d8:db:b5:0a:
                    ff:34:39:9b:8a:75:bc:ea:d4:7d:dc:88:a5:11:05:
                    91:4a:a7:58:25:4c:f3:c6:3c:d6:f6:87:60:0a:91:
                    df:dc:06:e6:f3:e4:fd:09:bf:94:a5:a8:5b:77:91:
                    2e:4e:13:e2:5e:f2:f2:21:8a:d7:85:ec:4a:62:8a:
                    f7:f3:e6:ea:be:93:53:08:10:dd:e3:bd:73:6b:62:
                    c9:00:70:27:86:08:c7:12:fc:ac:cf:09:8e:46:5b:
                    6a:6b:2b:35:60:d5:ad:48:9b:a5:33:16:43:3f:f3:
                    4f:f8:73:85:30:79:ea:81:aa:52:6b:3d:db:78:58:
                    83:a6:ef:5c:d5:32:3a:c2:42:aa:86:86:c8:af:84:
                    08:be:9a:80:bb:85:e7:4e:ba:3c:df:ad:a8:03:de:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:48:13:17:6F:FC:47:DD:15:DE:D8:C9:74:66:0E:C9:94:40:1D
            X509v3 Authority Key Identifier:
                keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ycZIExdv_EfdFd7YyXRmDsmUQB0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:16a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:46:91:de:33:e4:b3:9e:0c:6d:af:5f:2c:7c:f6:c8:7e:df:
         d2:b4:de:49:89:a4:cd:c5:c9:68:70:09:b0:81:e0:97:51:8a:
         31:e4:3e:7c:b6:2b:7b:44:cc:63:10:7b:34:b6:14:df:e0:67:
         7b:0c:56:8e:7b:25:f7:23:0f:55:3a:53:9f:5b:66:07:a2:51:
         84:ee:bc:e8:6e:35:d3:82:4d:4e:c3:56:84:2d:96:b9:3e:0f:
         b7:0e:77:43:cb:8b:fe:89:2d:35:fc:7e:a5:09:34:d9:35:f5:
         8d:ab:4d:da:7c:fa:b2:49:f9:7a:1c:a3:25:fa:2f:6f:ca:b6:
         9f:61:7c:94:99:6f:04:69:19:a7:46:75:bf:5c:e6:45:52:49:
         f9:0d:a5:ec:a3:12:a4:17:7a:81:ef:79:a5:c4:86:7c:22:af:
         5b:eb:ff:05:70:e5:69:40:dd:11:86:00:a7:fc:fa:80:8e:27:
         6d:6f:76:10:dd:21:6b:24:bf:a2:35:96:96:87:54:2d:0a:0e:
         e4:8a:95:6b:7f:9c:e7:5c:79:b5:07:41:ec:00:94:48:a6:d0:
         4b:70:a1:8e:8a:95:62:90:69:15:5e:68:17:79:1c:26:9e:e3:
         af:98:41:a4:3a:f9:5f:95:51:77:0a:77:32:b7:dd:70:d6:18:
         73:24:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----