Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LIVGBhDJljicvyyjW0b_W4Hmlrs.roa
File:                     LIVGBhDJljicvyyjW0b_W4Hmlrs.roa (raw, json)
Hash identifier:          3Nf2d61yOEMiRC6KLeRYmGsnCBC33aU0cc0WtOjy1bs=
Subject key identifier:   2C:85:46:06:10:C9:96:38:9C:BF:2C:A3:5B:46:FF:5B:81:E6:96:BB
Certificate issuer:       /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial:       02A0
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LIVGBhDJljicvyyjW0b_W4Hmlrs.roa
Signing time:             Fri 01 Sep 2023 09:26:31 +0000
ROA not before:           Fri 01 Sep 2023 09:26:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     31972
IP address blocks:        2406:ce40::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
        Validity
            Not Before: Sep  1 09:26:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2C85460610C996389CBF2CA35B46FF5B81E696BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:0f:92:43:6e:0b:58:10:10:82:da:a6:00:
                    c7:9f:48:3e:62:e2:8b:e1:2a:62:f4:be:bb:c1:e5:
                    86:7d:87:18:32:06:dd:91:c4:72:b6:e4:08:bc:c5:
                    24:4f:8a:d6:61:28:50:a6:11:95:e4:cf:e7:5a:c3:
                    22:e1:f9:dd:21:5c:94:da:92:a1:ca:9d:c9:82:66:
                    36:59:4f:bb:43:b1:71:19:64:79:75:b0:24:3a:8d:
                    3e:94:1f:b8:b3:f9:63:8a:d6:8e:22:ec:d4:70:3f:
                    fd:ca:03:eb:e1:6b:0e:da:fc:38:3d:cd:c7:4d:26:
                    7c:62:ad:18:8b:eb:e7:5e:93:84:7e:4f:5d:6c:da:
                    1a:2b:b8:88:0e:03:f7:78:4a:a1:06:8a:1a:a0:7a:
                    4c:54:16:40:ac:c1:a8:46:60:b2:2a:10:4e:6e:81:
                    68:55:c7:99:5d:34:da:12:cf:da:22:4f:47:14:6f:
                    1d:68:f5:2b:6e:bc:be:cf:1b:10:e8:ea:96:4a:47:
                    b1:5f:72:cd:f6:5c:00:ae:c1:11:1e:35:08:6d:f0:
                    13:49:67:5a:09:60:ee:4c:53:40:fd:24:a5:c4:a9:
                    00:f8:21:2a:a0:cf:55:53:ca:b0:f2:29:b4:39:59:
                    0b:48:03:08:3a:98:d3:99:c7:01:8b:d6:ed:46:12:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:46:06:10:C9:96:38:9C:BF:2C:A3:5B:46:FF:5B:81:E6:96:BB
            X509v3 Authority Key Identifier:
                keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LIVGBhDJljicvyyjW0b_W4Hmlrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ce40::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:c9:d1:06:9a:57:9d:e5:d1:27:05:96:94:2e:0f:78:98:
         d1:f3:fc:3d:4c:9e:dc:54:9b:e4:93:cd:b0:58:c4:1e:68:83:
         f8:34:fd:ec:18:d6:4c:93:36:c4:2b:9f:d2:b0:3b:91:01:a5:
         78:cc:03:91:74:84:e4:c3:6d:ec:cf:73:cf:de:74:f7:24:93:
         4e:b7:9e:d2:36:13:01:2c:8e:66:51:ce:b7:90:3c:85:c5:24:
         64:33:0c:bc:c3:c4:a1:bf:da:e1:48:2d:58:ca:27:f4:8c:5f:
         09:05:50:8e:f6:18:b3:e7:06:e3:4b:26:53:ec:ef:92:29:62:
         00:01:96:17:3a:bc:a2:0f:fa:31:e2:79:97:35:f7:19:61:4a:
         30:09:23:0f:42:ab:be:d2:ec:a5:30:70:58:e7:0a:e2:d8:bc:
         1a:71:f5:f2:87:33:ee:a5:fe:cd:32:e9:bb:0b:b5:df:3d:cd:
         a6:ed:d4:d7:42:85:d8:d1:cb:16:29:b0:04:3c:af:0c:1f:ca:
         d9:c8:58:18:43:bd:6e:03:e7:cb:75:f4:d9:93:5b:08:f0:c9:
         c0:2e:18:f9:fa:eb:c5:49:72:de:1b:d7:e7:c7:a2:49:28:a3:
         45:8b:c1:ca:08:b9:bd:5a:27:37:2f:93:d9:39:37:e2:b1:99:
         f0:f1:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----