Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/YWKzPlklsk8JwEDWcN1GN-cvlfY.roa
File:                     YWKzPlklsk8JwEDWcN1GN-cvlfY.roa (raw, json)
Hash identifier:          WISl8vBpPra8T8E2RuMIhT35hdbnjPd9QpV3tAvAdvQ=
Subject key identifier:   61:62:B3:3E:59:25:B2:4F:09:C0:40:D6:70:DD:46:37:E7:2F:95:F6
Certificate issuer:       /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial:       11FE
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/YWKzPlklsk8JwEDWcN1GN-cvlfY.roa
Signing time:             Fri 01 Sep 2023 09:26:43 +0000
ROA not before:           Fri 01 Sep 2023 09:26:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9922
IP address blocks:        2403:b340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4606 (0x11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
        Validity
            Not Before: Sep  1 09:26:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6162B33E5925B24F09C040D670DD4637E72F95F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:15:31:d7:c5:7b:a8:95:ff:f2:cc:55:b8:
                    9e:c6:c4:8b:a7:4a:a1:4a:2a:92:d0:fe:40:40:03:
                    83:67:68:5c:d7:47:ac:62:83:b8:93:20:92:cb:bf:
                    ed:d1:5f:f8:5a:84:e5:9f:b3:8f:53:21:4f:95:e2:
                    d8:a9:df:87:54:7c:e9:1b:f4:65:00:b9:b2:59:d2:
                    0e:b9:99:70:73:bc:81:ca:93:85:60:59:bb:9c:a8:
                    fd:67:6d:18:9a:4c:3c:c2:45:11:ef:ba:f4:93:54:
                    c1:c2:9c:e6:3b:fe:94:66:b4:56:3b:58:3d:14:87:
                    21:08:6f:2a:7a:61:50:32:ba:de:6d:12:93:bb:ee:
                    9d:6d:02:d7:9f:eb:32:ce:bb:53:95:06:f1:85:48:
                    51:ba:ce:fd:ac:f3:ae:09:45:a0:39:75:ad:20:76:
                    13:cb:fa:b7:21:c3:00:24:9c:80:18:e9:6a:47:7b:
                    40:57:79:60:2c:7f:17:24:d8:44:95:e3:b1:d0:84:
                    ab:97:f6:b3:c0:68:12:84:4e:fe:a6:87:5f:55:f9:
                    71:57:ba:ec:fe:bd:08:06:32:29:19:c2:10:bd:2d:
                    9e:30:49:09:8f:4a:50:77:26:6f:20:69:29:12:ec:
                    4c:ff:c7:f8:66:6e:3a:54:a3:53:68:91:fd:1f:e0:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:B3:3E:59:25:B2:4F:09:C0:40:D6:70:DD:46:37:E7:2F:95:F6
            X509v3 Authority Key Identifier:
                keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/YWKzPlklsk8JwEDWcN1GN-cvlfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b340::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:2d:12:c8:93:39:7d:5d:20:13:80:23:c7:fb:61:1d:ca:
         87:8e:93:71:d5:8a:70:c7:36:29:16:a4:97:bb:9f:45:e4:7c:
         27:91:b6:5a:69:d7:8e:e9:0a:4a:18:46:61:ea:39:d3:a1:fd:
         62:d3:75:53:7c:ba:8a:91:3d:bd:d2:db:d0:1f:22:6b:48:3e:
         94:a9:d1:04:df:88:2f:29:2a:40:89:03:fe:3f:3a:19:21:cb:
         4b:20:11:9a:09:ea:7c:92:c8:76:e3:2f:13:04:b0:22:55:8a:
         4d:f2:4a:96:25:dc:71:b6:56:0f:6a:91:b8:3f:a5:66:93:34:
         db:45:48:27:ff:e9:dc:c5:47:4b:6d:04:78:36:0e:05:49:d5:
         63:62:37:34:ca:a3:75:f5:62:56:16:d1:4c:85:f1:36:71:ae:
         c0:5a:0c:19:a6:ac:4f:10:fc:3f:a3:c1:2d:0e:ce:fa:9b:58:
         60:57:47:3e:60:72:bf:0e:d4:8e:09:0a:78:99:8c:54:1b:17:
         93:99:19:b7:4b:7b:ec:2e:49:e1:c8:b3:48:16:9b:90:ed:ec:
         54:94:a1:ac:df:a1:c8:0d:20:54:7b:76:9a:b8:84:83:bb:2e:
         d5:52:55:6b:12:5d:cd:83:62:03:8a:20:9a:f7:16:a4:fd:fb:
         65:4f:3e:44
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yMzA5MDEw
OTI2NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxNjJCMzNFNTkyNUIy
NEYwOUMwNDBENjcwREQ0NjM3RTcyRjk1RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC46BUx18V7qJX/8sxVuJ7GxIunSqFKKpLQ/kBAA4NnaFzXR6xi
g7iTIJLLv+3RX/hahOWfs49TIU+V4tip34dUfOkb9GUAubJZ0g65mXBzvIHKk4Vg
WbucqP1nbRiaTDzCRRHvuvSTVMHCnOY7/pRmtFY7WD0UhyEIbyp6YVAyut5tEpO7
7p1tAtef6zLOu1OVBvGFSFG6zv2s864JRaA5da0gdhPL+rchwwAknIAY6WpHe0BX
eWAsfxck2ESV47HQhKuX9rPAaBKETv6mh19V+XFXuuz+vQgGMikZwhC9LZ4wSQmP
SlB3Jm8gaSkS7Ez/x/hmbjpUo1Nokf0f4JUXAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUYWKzPlklsk8JwEDWcN1GN+cvlfYwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL1lXS3pQbGtsc2s4SndFRFdj
TjFHTi1jdmxmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk
A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQB6ky0SyJM5fV0gE4Ajx/thHcqHjpNx1Ypw
xzYpFqSXu59F5HwnkbZaadeO6QpKGEZh6jnTof1i03VTfLqKkT290tvQHyJrSD6U
qdEE34gvKSpAiQP+PzoZIctLIBGaCep8ksh24y8TBLAiVYpN8kqWJdxxtlYPapG4
P6VmkzTbRUgn/+ncxUdLbQR4Ng4FSdVjYjc0yqN19WJWFtFMhfE2ca7AWgwZpqxP
EPw/o8EtDs76m1hgV0c+YHK/DtSOCQp4mYxUGxeTmRm3S3vsLknhyLNIFpuQ7exU
lKGs36HIDSBUe3aauISDuy7VUlVrEl3Ng2IDiiCa9xak/ftlTz5E
-----END CERTIFICATE-----