Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa
File:                     po5ZXKPduUumUA8wSdxLTsx-El0.roa (raw, json)
Hash identifier:          Gp6RyOQTnf5LWqVzJPimfawGHN88nymXKHbLDletgW0=
Subject key identifier:   A6:8E:59:5C:A3:DD:B9:4B:A6:50:0F:30:49:DC:4B:4E:CC:7E:12:5D
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       10B8
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa
Signing time:             Mon 19 Feb 2024 12:58:23 +0000
ROA not before:           Mon 19 Feb 2024 12:58:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131633
IP address blocks:        2404:2a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Feb 19 12:58:23 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A68E595CA3DDB94BA6500F3049DC4B4ECC7E125D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:58:60:55:85:92:f5:02:3f:32:f6:52:d3:81:
                    9a:fe:14:b0:64:e7:be:52:da:fb:dd:5c:2c:8e:13:
                    6d:1b:c4:03:6f:28:47:fd:ea:7e:d7:40:fe:72:cf:
                    7f:db:f6:c8:d3:f6:ac:af:ba:6e:3e:70:d9:eb:1d:
                    e0:5b:b6:f9:2f:c5:81:99:1f:6d:c6:48:29:5a:6a:
                    15:65:c3:27:47:dc:df:26:f8:39:3c:36:b2:95:50:
                    a7:38:dd:81:ec:bb:dd:77:e8:ab:a0:50:42:6e:42:
                    ac:44:85:a8:4c:01:b5:fb:5b:da:70:37:00:33:35:
                    e0:5c:c9:81:6e:41:d2:ab:80:37:48:ec:48:7c:67:
                    83:78:09:b8:32:df:b6:cf:d1:29:03:d6:93:09:fc:
                    76:0f:c5:4a:ab:36:c4:5d:a5:38:e2:8e:13:97:05:
                    78:51:68:2d:d0:4f:cb:e3:27:60:a2:cb:0c:66:19:
                    ff:49:f3:b4:86:c1:44:b0:a4:35:10:64:46:14:cc:
                    93:17:e7:3b:cf:c4:34:a6:3d:9a:c5:25:4b:76:78:
                    20:01:65:62:81:fd:86:b7:16:43:30:26:4c:88:ba:
                    5f:b2:ac:c9:e0:6b:20:e9:8a:2b:74:ac:02:d2:c9:
                    aa:d1:c0:95:42:64:cc:ff:de:6d:4e:00:a3:2a:8e:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:59:5C:A3:DD:B9:4B:A6:50:0F:30:49:DC:4B:4E:CC:7E:12:5D
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:1f:9d:ef:9e:c1:41:2d:55:ca:88:61:2e:ec:0a:f5:e9:1d:
         ec:a6:8b:ac:de:6f:32:70:bc:c0:4c:b0:0f:4b:00:72:89:a5:
         73:ed:fb:5b:22:bc:7b:40:12:2c:c0:e4:a4:f9:2c:eb:7e:0e:
         fe:cf:1c:df:e1:18:a7:1b:a5:19:5b:07:d3:dc:c2:ec:77:cd:
         78:2f:6e:59:d4:39:7c:74:f7:b3:b5:de:64:f3:3e:3c:78:0c:
         06:63:de:ee:a0:e4:cf:c1:c5:fb:84:c7:6f:73:1a:b8:8d:4e:
         45:dc:2a:54:70:ed:4c:36:ef:9b:03:73:3d:de:fe:0f:ec:b8:
         70:e9:a4:55:51:b5:14:02:94:9b:d1:82:65:15:4d:d3:83:de:
         f9:d1:dc:48:22:68:b7:c4:97:c2:75:b5:72:2a:12:d8:f4:e9:
         9d:91:7f:ab:92:29:21:c4:4b:ad:c6:5c:f1:4a:f6:5d:e3:bb:
         a1:cb:66:97:ee:3a:2b:1a:bb:e7:29:c7:d4:73:fd:18:08:74:
         c2:a1:d3:68:0c:a7:0c:f3:cd:57:68:52:18:ea:d0:d6:f6:e8:
         b0:dc:d1:f7:b9:fe:39:2f:9c:2f:dd:4c:b1:eb:de:bc:8a:2b:
         69:54:6a:19:3d:4d:bc:e9:f5:7c:d9:be:65:5c:25:ad:43:c0:
         e7:cf:0c:3f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICELgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3
MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yNDAyMTkx
MjU4MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2OEU1OTVDQTNEREI5
NEJBNjUwMEYzMDQ5REM0QjRFQ0M3RTEyNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmWGBVhZL1Aj8y9lLTgZr+FLBk575S2vvdXCyOE20bxANvKEf9
6n7XQP5yz3/b9sjT9qyvum4+cNnrHeBbtvkvxYGZH23GSClaahVlwydH3N8m+Dk8
NrKVUKc43YHsu9136KugUEJuQqxEhahMAbX7W9pwNwAzNeBcyYFuQdKrgDdI7Eh8
Z4N4Cbgy37bP0SkD1pMJ/HYPxUqrNsRdpTjijhOXBXhRaC3QT8vjJ2CiywxmGf9J
87SGwUSwpDUQZEYUzJMX5zvPxDSmPZrFJUt2eCABZWKB/Ya3FkMwJkyIul+yrMng
ayDpiit0rALSyarRwJVCZMz/3m1OAKMqjtBJAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUpo5ZXKPduUumUA8wSdxLTsx+El0wHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b
Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9wbzVaWEtQZHVVdW1V
QTh3U2R4TFRzeC1FbDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEAVx+d757BQS1VyohhLuwK9ekd7KaL
rN5vMnC8wEywD0sAcomlc+37WyK8e0ASLMDkpPks634O/s8c3+EYpxulGVsH09zC
7HfNeC9uWdQ5fHT3s7XeZPM+PHgMBmPe7qDkz8HF+4THb3MauI1ORdwqVHDtTDbv
mwNzPd7+D+y4cOmkVVG1FAKUm9GCZRVN04Pe+dHcSCJot8SXwnW1cioS2PTpnZF/
q5IpIcRLrcZc8Ur2XeO7octml+46Kxq75ynH1HP9GAh0wqHTaAynDPPNV2hSGOrQ
1vbosNzR97n+OS+cL91MsevevIoraVRqGT1NvOn1fNm+ZVwlrUPA588MPw==
-----END CERTIFICATE-----