Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKIS/6NKF5GBxYJnqZeRK55km8GHrRlI.roa
File:                     6NKF5GBxYJnqZeRK55km8GHrRlI.roa (raw, json)
Hash identifier:          +JyhqJoPNOhwQIi9xlMtbaP2Y+CVLwGj1f7LMpYgTjM=
Subject key identifier:   E8:D2:85:E4:60:71:60:99:EA:65:E4:4A:E7:99:26:F0:61:EB:46:52
Certificate issuer:       /CN=1FF0C43AE612FD57EAAC71DC208AEC4E56D2D665
Certificate serial:       0967
Authority key identifier: 1F:F0:C4:3A:E6:12:FD:57:EA:AC:71:DC:20:8A:EC:4E:56:D2:D6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H_DEOuYS_VfqrHHcIIrsTlbS1mU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/6NKF5GBxYJnqZeRK55km8GHrRlI.roa
Signing time:             Tue 29 Sep 2020 10:04:39 +0000
ROA not before:           Tue 29 Sep 2020 10:04:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131652
IP address blocks:        2404:dfc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF0C43AE612FD57EAAC71DC208AEC4E56D2D665
        Validity
            Not Before: Sep 29 10:04:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E8D285E460716099EA65E44AE79926F061EB4652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:82:0a:c8:87:86:6c:3d:8f:d1:a0:4a:16:
                    5a:bf:b2:8a:6e:20:93:26:72:b0:17:ac:d6:2b:27:
                    a4:27:bf:0a:e4:cc:eb:c0:15:40:ca:db:19:21:6d:
                    49:ba:b4:77:0f:d8:a9:b1:1f:eb:f2:04:b3:ba:c2:
                    d0:7e:1f:98:cf:f2:52:08:dd:01:d5:56:6a:0a:6d:
                    53:1e:23:75:83:b6:fa:29:af:3a:35:85:c3:a7:9f:
                    a6:87:93:b9:8d:9d:70:98:10:e2:91:21:b8:76:60:
                    59:c7:a1:f7:e2:80:b3:59:0b:3f:f2:d3:a1:88:2b:
                    9f:12:22:6c:b5:4c:9c:fd:76:c5:db:26:eb:d0:02:
                    10:b0:ac:e0:e5:53:ef:6c:cd:55:a6:bb:1d:18:19:
                    57:16:d2:c1:99:79:e7:76:1e:df:d9:8b:47:b6:1c:
                    9b:6e:a1:5b:dd:89:1e:aa:d3:7f:4b:3c:ed:80:f6:
                    f1:dd:a6:c9:3b:85:4b:63:ef:1b:3e:a4:1c:31:11:
                    c9:31:4b:d3:83:a7:5b:85:9c:19:21:58:58:4d:49:
                    9a:42:2c:b3:3e:e2:fd:55:90:18:68:80:02:ff:de:
                    53:7d:cb:57:bd:26:bf:9e:4c:cf:8c:74:2b:27:e8:
                    ff:9e:d0:09:c7:93:49:1d:e5:6e:6c:be:8a:7a:0e:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D2:85:E4:60:71:60:99:EA:65:E4:4A:E7:99:26:F0:61:EB:46:52
            X509v3 Authority Key Identifier:
                keyid:1F:F0:C4:3A:E6:12:FD:57:EA:AC:71:DC:20:8A:EC:4E:56:D2:D6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/H_DEOuYS_VfqrHHcIIrsTlbS1mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H_DEOuYS_VfqrHHcIIrsTlbS1mU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/6NKF5GBxYJnqZeRK55km8GHrRlI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:dfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:34:12:14:0e:23:b5:e8:4e:6a:28:71:ff:1c:bf:18:ef:10:
         a6:7d:54:bd:e0:79:fa:2c:e8:38:f3:4b:e2:65:ad:3c:b0:0d:
         b6:ae:80:d8:8e:53:b9:4b:3d:1d:43:fe:38:70:9e:8b:83:ff:
         64:2f:3c:cf:3e:b5:fb:6c:c2:ed:09:27:f5:6d:57:f9:e8:ff:
         12:a1:2c:64:50:b6:c3:e1:9b:c2:a2:b5:75:9b:a2:0b:39:51:
         2c:df:64:9e:be:ac:a8:ab:e1:5d:ee:b2:f8:c1:f1:e2:72:42:
         8b:3e:c8:45:ab:43:86:a8:c9:f0:7b:49:05:56:ab:d7:a8:8f:
         40:1f:c8:a3:9b:2b:e1:bb:7b:7b:72:e9:74:36:4e:c7:ad:54:
         6e:e9:be:59:68:d3:6b:c5:4e:80:00:96:7d:3e:f4:42:9c:2f:
         75:d4:12:2f:04:6e:4f:97:f7:29:ae:c1:99:f4:4e:d6:a3:9a:
         c7:f1:74:bd:9b:f5:37:34:21:50:f6:b1:9d:16:f4:b2:0f:99:
         30:ad:52:29:81:77:90:a9:84:c4:20:58:84:0b:98:bb:69:3b:
         c1:ad:43:24:19:20:09:54:d2:d9:ce:e8:c4:23:7a:75:4b:41:
         c8:db:69:c3:66:a8:45:a9:70:d6:47:cd:aa:34:1a:d8:97:ad:
         a8:88:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----