Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa
File:                     ppTNXLFPNNCkGFxPwixl06Ehan0.roa (raw, json)
Hash identifier:          R8UKxdpouIOe6h/A07NHgMSfFAmLExR8GDfbW/vkit8=
Subject key identifier:   A6:94:CD:5C:B1:4F:34:D0:A4:18:5C:4F:C2:2C:65:D3:A1:21:6A:7D
Certificate issuer:       /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial:       F1
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa
Signing time:             Wed 27 Mar 2024 15:28:57 +0000
ROA not before:           Wed 27 Mar 2024 15:28:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     8075
IP address blocks:        2400:f520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
        Validity
            Not Before: Mar 27 15:28:57 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A694CD5CB14F34D0A4185C4FC22C65D3A1216A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:ad:20:d0:2d:48:b4:25:4b:c9:9e:6c:95:
                    f0:8b:44:a7:47:d6:b1:01:c9:f9:61:f6:05:e2:c8:
                    3d:f3:d9:ca:4b:f4:d5:9e:e7:80:4d:f8:22:cb:d6:
                    27:67:23:a3:d8:c9:9c:e8:10:5a:a1:f7:82:9d:d3:
                    b5:56:a0:5d:5b:d5:17:a1:8c:ce:e6:27:c0:41:4f:
                    86:c4:4a:28:d1:e6:df:13:4d:ce:19:ad:52:a1:18:
                    f2:cc:09:de:0f:7a:c9:f9:af:93:74:e0:6d:18:13:
                    c2:9e:d1:38:f6:f0:0f:79:c9:54:bf:24:9c:cd:10:
                    c4:de:8e:b2:96:1d:c9:d8:fc:90:b7:82:5c:29:e0:
                    37:4b:17:8a:db:bc:eb:77:ad:48:69:5e:36:79:67:
                    f6:ba:61:f7:5b:38:a5:cd:f7:7a:5f:75:ec:81:a5:
                    75:a7:f3:18:0e:70:fe:b6:b5:8e:fc:f3:39:f5:25:
                    9e:7a:50:12:b0:34:6a:5e:9f:eb:c9:b0:8f:31:9e:
                    be:5e:33:14:4a:28:4d:89:56:79:19:34:25:81:ee:
                    66:75:37:c4:44:d0:84:2b:bb:54:61:76:91:3a:71:
                    c6:7b:0f:40:0b:cc:bc:db:51:24:11:3a:29:fd:3f:
                    72:54:13:96:53:d1:3c:d0:7a:42:f3:0c:41:cb:bc:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:94:CD:5C:B1:4F:34:D0:A4:18:5C:4F:C2:2C:65:D3:A1:21:6A:7D
            X509v3 Authority Key Identifier:
                keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:9d:83:ff:e8:da:74:f3:93:78:06:54:c7:b2:eb:93:87:c7:
         fe:5e:d3:82:22:f1:75:13:2c:a7:65:c3:3c:df:82:a9:9d:a5:
         ed:41:dd:d2:bc:76:42:f0:11:83:1d:a1:6e:fa:09:ef:a9:02:
         7f:8a:e3:7e:85:98:43:f5:77:7d:ea:2a:47:ed:09:3e:16:c2:
         31:f7:cc:1d:d6:9b:43:2b:46:b9:76:28:0c:33:87:84:5f:65:
         11:f5:12:5d:30:72:88:95:ce:33:26:fb:14:78:1c:91:be:0f:
         87:40:e1:b5:10:b2:a7:dc:e2:14:68:32:d6:32:23:f0:92:4e:
         f7:2f:1e:f7:b7:9c:84:29:cc:f9:5a:4c:14:72:d3:ec:5e:ba:
         35:bb:34:0b:6f:64:96:27:27:59:54:07:7c:78:ae:38:af:0f:
         23:68:9a:da:e6:c7:65:a9:c0:96:49:00:12:3e:dd:02:b7:77:
         8c:a0:d2:40:3b:41:59:18:24:1d:56:a1:d8:41:7c:27:7e:ad:
         fb:6a:56:1b:fa:9e:eb:f5:d5:f7:23:16:7d:65:15:a1:12:97:
         fb:9e:c6:c3:31:57:b8:b3:09:f4:29:8a:fd:ca:ff:d7:0a:16:
         df:cd:13:e8:bd:8d:4f:1a:c3:35:3d:ce:90:d8:a9:58:3e:7c:
         ce:d0:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----