Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa
File:                     fqdCH72mqJw0Kzba8vM4ZPV--3I.roa (raw, json)
Hash identifier:          mxxID5zs0bsvxfcE8YhvWY3wqmUBpEgfQvjSg1teW1U=
Subject key identifier:   7E:A7:42:1F:BD:A6:A8:9C:34:2B:36:DA:F2:F3:38:64:F5:7E:FB:72
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       05DE
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa
Signing time:             Fri 01 Sep 2023 09:20:03 +0000
ROA not before:           Fri 01 Sep 2023 09:20:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17415
IP address blocks:        2406:3540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep  1 09:20:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7EA7421FBDA6A89C342B36DAF2F33864F57EFB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:75:d3:8e:0d:c4:29:ea:d2:13:fb:1b:fb:
                    48:b1:8b:3d:0a:bb:c1:5b:c8:ac:4a:98:ac:c7:1d:
                    c0:1c:aa:8b:9e:a9:9f:70:08:f0:cf:ec:9d:95:1a:
                    96:18:f4:fa:be:ff:a5:32:ed:61:ae:e7:9e:09:04:
                    13:eb:ae:f9:73:47:29:ea:3d:32:9d:e9:69:6b:7f:
                    29:88:d6:25:a6:b6:ce:38:a8:bf:40:dd:a9:87:3b:
                    60:95:5f:d3:b1:01:49:a1:f4:03:d7:e6:50:f1:c4:
                    46:86:17:8a:4a:86:c4:3b:bc:45:2a:10:af:9d:47:
                    d4:6f:19:7a:c4:cd:30:30:c3:21:58:a0:6e:7a:5e:
                    21:85:38:20:73:1e:d7:a3:bc:18:93:45:dd:5d:cd:
                    f7:34:4b:8f:aa:31:31:91:22:bc:73:d2:d7:ce:82:
                    86:28:3d:90:16:0d:6c:9a:77:b2:7f:f7:0b:5c:5d:
                    77:65:1c:95:e0:ab:3f:e9:0f:0f:17:80:32:87:3c:
                    ef:af:ce:1e:78:39:bf:5b:c5:c7:ff:b1:f5:52:17:
                    b1:08:a9:a6:9f:fc:79:8d:7a:8b:c7:52:d2:ef:fd:
                    b9:8e:8a:bc:c5:f6:5e:c0:07:19:e7:11:dc:a5:b0:
                    2e:f4:4c:d3:de:3d:3c:3e:64:65:85:fe:ef:57:8d:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:42:1F:BD:A6:A8:9C:34:2B:36:DA:F2:F3:38:64:F5:7E:FB:72
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:0a:50:0a:d4:59:64:bd:12:14:0a:bc:04:d6:77:43:30:2e:
         a9:88:c0:57:bd:09:e1:91:5b:55:43:04:d2:40:78:59:c9:c7:
         7a:45:9b:e2:97:12:6a:db:44:62:40:32:cd:0b:66:a3:74:c6:
         68:bb:12:f8:94:57:3b:1b:81:4b:bb:4c:64:fd:9b:92:19:f1:
         1e:c2:d1:5a:4f:fd:e5:b1:be:6f:96:ec:26:13:78:e8:4b:31:
         55:8d:d4:d4:a9:fb:d8:7e:4d:36:48:02:9b:33:01:ae:4d:14:
         55:54:83:7a:3d:39:fe:ad:78:29:7c:bf:f2:1e:d9:c3:1b:47:
         01:3f:75:5e:66:35:d7:fc:17:25:a9:eb:59:cb:6a:6b:aa:3d:
         d8:9b:82:78:40:57:b1:39:49:26:c2:c3:cc:91:5d:85:63:66:
         4b:7a:4c:c8:4f:ac:7b:38:fa:4c:3a:da:d9:37:b7:f6:f4:d1:
         0b:b4:e7:de:8b:be:54:15:0e:65:ab:ca:4e:03:3d:80:f4:40:
         b5:5e:f8:02:a4:f2:bc:e6:df:3a:0a:90:74:35:54:4d:e7:24:
         8b:0a:73:6e:82:be:f2:d5:04:af:c5:b7:67:de:55:97:7e:34:
         28:33:d2:6c:9e:0e:e0:fc:c4:54:ec:a7:73:cf:78:06:79:f9:
         c8:a1:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----