Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa
File:                     yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa (raw, json)
Hash identifier:          JX/xDvBkwHCFC3p6EFGTJ2gbLGjgJrbfihDRn0gZRco=
Subject key identifier:   C9:98:13:CE:06:FD:27:3E:2F:E6:49:54:80:06:61:63:66:87:10:EE
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       1142
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa
Signing time:             Mon 26 Aug 2024 05:20:48 +0000
ROA not before:           Mon 26 Aug 2024 05:20:48 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131633
IP address blocks:        2404:2a40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4418 (0x1142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Aug 26 05:20:48 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C99813CE06FD273E2FE6495480066163668710EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:bc:8b:ac:7a:cd:96:b3:c7:a5:b2:ae:b5:
                    b4:e4:b9:25:8f:6a:35:da:ec:e0:f1:dd:de:38:91:
                    0a:ad:23:b3:7a:34:fc:d5:76:53:00:e6:ac:cc:c8:
                    10:47:1d:a4:60:ea:cb:75:74:bb:4a:e7:fb:af:cb:
                    b0:0e:ed:77:6e:d8:cd:52:3c:79:db:20:4c:3b:07:
                    d8:82:54:ae:13:2f:ea:06:93:88:94:cb:30:32:8a:
                    5c:f7:a0:3c:a2:23:e8:d8:94:88:2b:f8:fa:53:b7:
                    e9:8c:93:61:be:c6:fc:a6:7d:1d:d6:ed:51:c8:6d:
                    38:c5:ee:21:4c:ba:21:b6:6e:20:18:1d:61:c3:b5:
                    18:c7:8c:c6:0b:25:2b:c7:3b:cd:c9:1c:af:f8:14:
                    6a:d5:d4:3c:33:a9:92:6a:d7:c6:bc:17:25:1f:e5:
                    09:69:18:0c:66:35:1f:7e:5a:43:51:c9:21:1d:67:
                    1d:c6:76:d2:15:b7:57:90:a9:31:e7:d2:08:d5:5a:
                    c8:8b:be:17:3e:c9:3c:7b:bf:d5:14:d5:44:b7:35:
                    c3:c5:ed:20:69:d6:14:92:f6:35:5e:0e:be:be:ff:
                    49:91:e5:8b:d2:d6:82:34:26:b2:ca:79:70:91:93:
                    d9:18:cf:77:5b:4f:99:b1:39:69:1c:bc:05:4a:6c:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:98:13:CE:06:FD:27:3E:2F:E6:49:54:80:06:61:63:66:87:10:EE
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:ee:fc:fe:ba:aa:88:94:aa:e9:ce:a4:e0:ba:50:fc:71:
         ca:d6:0e:d7:04:6e:8e:aa:bd:f1:da:37:ed:2d:38:a8:07:df:
         1d:2c:99:6e:35:78:c1:a0:0e:05:a7:a2:9b:69:3c:c8:3b:33:
         f5:fb:5e:f8:95:6c:2e:54:16:d7:3d:e7:6b:d6:45:b9:bb:1f:
         eb:11:6d:e1:5f:7d:f6:29:95:0d:a8:a3:d3:1c:d4:52:ce:20:
         d8:60:73:55:62:c8:0f:a4:90:cb:92:9a:f6:83:f7:97:75:68:
         07:63:0a:dc:9f:10:e7:6d:07:d4:42:35:8e:c8:71:8f:f1:c8:
         e2:32:a1:bf:d6:d6:d9:dd:dd:22:32:fb:6b:b5:ce:e1:4d:49:
         a3:7c:a3:4f:0b:4d:d7:fa:cc:68:3d:31:34:c0:7c:34:90:8b:
         1f:7d:76:3a:4d:ca:9d:0d:e2:10:9d:64:1a:a1:6b:ec:3f:2d:
         93:95:e1:97:8d:b5:cb:57:2b:0d:40:69:99:ea:3a:74:ae:f4:
         ed:54:fc:40:e9:cf:40:3a:f7:cc:fa:ac:77:ea:35:ad:94:b9:
         5a:42:52:16:87:aa:8d:e5:9d:00:31:22:37:da:f9:a1:e3:5a:
         83:36:e1:64:31:dc:1f:b5:e4:3e:d6:c2:ca:6d:9f:b4:cb:28:
         8f:2b:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----