Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ezU_osrYRKiZa4avAefHDb7COEc.roa
File:                     ezU_osrYRKiZa4avAefHDb7COEc.roa (raw, json)
Hash identifier:          nEr1ytvryhN/JmDMKY+tqjfbJ8LWniY0W1p1Oe95cBs=
Subject key identifier:   7B:35:3F:A2:CA:D8:44:A8:99:6B:86:AF:01:E7:C7:0D:BE:C2:38:47
Certificate issuer:       /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Certificate serial:       0A
Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ezU_osrYRKiZa4avAefHDb7COEc.roa
Signing time:             Fri 24 May 2024 07:49:29 +0000
ROA not before:           Fri 24 May 2024 07:49:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63898
IP address blocks:        2406:b4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
        Validity
            Not Before: May 24 07:49:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7B353FA2CAD844A8996B86AF01E7C70DBEC23847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:40:e7:60:36:e0:09:84:1e:bb:93:fa:12:
                    dc:ae:e2:dd:13:0e:76:24:2c:2b:2a:69:f3:9e:e4:
                    e4:9f:41:4d:96:24:ee:e9:82:3c:69:75:0a:0a:57:
                    c4:e7:20:49:c2:36:4e:3e:b1:30:64:2c:16:6e:13:
                    54:db:2c:3a:04:a7:eb:67:bd:9a:13:56:86:70:57:
                    91:2d:be:49:a3:9c:11:9f:78:f6:22:10:2c:9e:3b:
                    31:85:fd:10:88:fb:a6:ca:36:d7:13:89:6e:a0:65:
                    50:fb:3a:82:de:a2:c7:f6:10:35:49:09:64:af:9a:
                    de:3d:cc:f1:60:ac:7e:87:38:88:cc:d4:cb:cc:12:
                    9f:a6:89:0b:2b:b5:7d:6b:c2:19:b2:fd:c5:29:e6:
                    04:b8:4f:72:7e:02:31:cd:42:5e:f0:d9:c6:0e:80:
                    cd:2b:5a:2a:bc:da:99:5f:e8:68:d9:a2:9f:8f:20:
                    17:80:84:73:d0:1e:cc:71:15:53:e7:21:56:2c:19:
                    cb:7c:5b:87:a0:fb:6c:a9:2e:aa:44:41:ea:84:a2:
                    48:59:11:b5:f8:5b:04:64:8c:2c:e6:f4:b7:45:e1:
                    c2:f8:dc:3c:36:64:14:56:91:38:c4:ac:e6:30:13:
                    5b:b6:ed:c5:3d:3f:73:9d:44:66:d1:f6:1e:1a:f1:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:3F:A2:CA:D8:44:A8:99:6B:86:AF:01:E7:C7:0D:BE:C2:38:47
            X509v3 Authority Key Identifier:
                keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ezU_osrYRKiZa4avAefHDb7COEc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:ae:48:f5:7b:d9:e1:19:19:08:e2:eb:66:68:0f:02:d4:
         08:e6:d7:cc:01:bb:dc:4e:fd:b1:c4:95:4e:a6:72:a6:f7:29:
         46:e7:b4:6d:31:f8:cd:3d:a2:78:dd:21:f5:54:5c:f6:14:3f:
         e2:2e:46:44:ff:91:91:02:9e:b0:8b:8a:68:48:6c:a5:b7:9d:
         2e:b9:f0:e5:b9:1c:77:b0:1e:cb:84:12:03:3c:bb:bd:5b:e3:
         f7:77:6a:4d:9a:fc:0d:e1:d5:e9:03:17:7e:2e:e4:0a:7f:49:
         32:08:89:57:5c:f9:43:7d:54:70:b4:d4:e3:18:b7:12:cd:34:
         6e:b2:bc:f8:6a:51:82:67:b2:17:bd:a9:e5:db:3f:f6:f3:54:
         db:4a:3a:3d:fa:24:96:00:a9:33:0c:e6:58:f2:29:2b:35:c3:
         da:95:fa:52:10:a6:95:46:b2:ba:dd:3e:ef:ae:a7:24:ae:b3:
         b3:2b:36:4f:f9:bd:a7:bf:fb:57:09:86:4f:f7:3d:d4:40:a8:
         57:be:be:8a:a0:d3:9d:03:81:55:c6:72:27:88:5b:34:42:01:
         51:96:9d:dd:ac:0c:f5:47:c9:f0:1d:33:dd:54:c3:18:de:7a:
         b5:cf:de:51:d4:b3:44:45:83:1a:cb:32:7b:30:62:d2:29:e6:
         47:34:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----