Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
File:                     3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa (raw, json)
Hash identifier:          rakLdUcEbckxMUq5OY2IB9IVMaCmqWPd6aLKqf4TLlY=
Subject key identifier:   DE:C0:BF:C5:64:D8:38:24:61:8D:1A:5F:63:A0:65:84:6E:AA:31:8F
Certificate issuer:       /CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Certificate serial:       0E32
Authority key identifier: C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
Signing time:             Tue 29 Sep 2020 10:04:57 +0000
ROA not before:           Tue 29 Sep 2020 10:04:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131631
IP address blocks:        103.131.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3634 (0xe32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
        Validity
            Not Before: Sep 29 10:04:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DEC0BFC564D83824618D1A5F63A065846EAA318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:20:8a:c0:a4:0e:eb:15:12:44:49:6f:fc:
                    7e:ff:c2:99:e9:cd:c1:8c:ef:d3:11:fc:98:d5:0f:
                    50:2b:2b:4c:10:69:41:93:28:6b:46:50:4c:46:d5:
                    c1:5c:bf:24:21:73:f3:63:34:06:fe:ce:cb:a4:3c:
                    77:ca:b1:4f:7c:24:57:f8:8a:a2:ef:e5:77:f4:48:
                    3b:03:9d:95:bc:ff:3d:d8:ec:17:44:d3:9c:2b:1c:
                    b6:0f:2e:1e:af:d3:e5:c9:01:ba:fe:22:ff:00:0d:
                    23:57:d3:7d:6b:83:63:d1:e4:87:72:d2:6f:62:8c:
                    f4:c5:77:2e:db:b6:4e:47:2b:0f:b6:ec:2a:f8:b4:
                    0f:a7:67:aa:e0:fd:22:4c:79:43:32:a7:f7:aa:7b:
                    f4:31:3e:47:e4:1b:00:b9:ca:fc:3e:b5:42:07:a6:
                    64:0b:b6:48:e0:2c:9a:c7:bb:ad:54:8a:8f:a5:67:
                    c6:ca:70:fd:c5:1a:2a:c3:90:4b:87:3e:9b:e2:84:
                    eb:8d:d7:b2:f2:76:7b:72:cf:c1:a6:ce:34:4e:a7:
                    22:bb:33:45:21:e1:cd:8a:d9:63:89:03:9b:73:0a:
                    41:99:45:29:31:6a:fe:2b:78:da:ae:e0:7e:1c:46:
                    da:3f:a9:9d:83:f5:c7:c0:1c:b2:d4:23:8b:8e:a4:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C0:BF:C5:64:D8:38:24:61:8D:1A:5F:63:A0:65:84:6E:AA:31:8F
            X509v3 Authority Key Identifier:
                keyid:C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:ff:11:b6:a8:b4:9a:5e:d8:d0:ca:a2:04:1c:dc:6a:b6:
         ee:ef:42:89:8f:c3:42:af:bb:f1:a1:49:8f:ab:b5:9b:44:60:
         2c:75:2f:a9:81:32:d8:bb:1a:ab:7e:52:27:c5:4e:b3:00:62:
         4a:d1:ad:fe:c4:7a:45:98:ee:a0:f1:e9:9c:10:3c:e9:0d:6f:
         72:65:48:c9:ff:ea:d3:83:d2:57:b6:07:5d:44:1d:c8:81:66:
         d4:df:f1:76:44:8e:a9:7d:ba:8c:b4:8d:fe:74:31:50:6f:5b:
         79:35:77:0f:89:5b:1a:9b:70:92:08:5a:9e:85:19:0d:80:76:
         e3:e8:55:fb:a8:4a:c0:f7:02:6a:f9:9b:61:de:c0:47:8f:7f:
         8a:a0:bb:27:90:01:5c:52:7c:29:36:c3:1a:21:29:f2:95:18:
         f5:de:3a:8f:9e:7a:05:75:17:ab:64:91:0f:84:c4:93:fd:de:
         96:ee:19:d9:b5:f5:c5:e8:7f:d5:04:44:d4:ce:83:9d:3a:30:
         e6:31:6e:2f:98:64:51:d8:0f:2d:74:3f:b3:ec:a2:42:fc:99:
         97:4b:8d:fa:c4:54:8a:57:b8:41:7d:00:59:35:f9:02:f4:47:
         da:ce:bd:bc:a5:55:ba:ad:1a:64:59:8e:9c:a6:bb:33:aa:e2:
         ef:a6:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----