Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/busDstxVPF6JhcWFV3ybEPJJcZg.roa
File:                     busDstxVPF6JhcWFV3ybEPJJcZg.roa (raw, json)
Hash identifier:          1cZ1YuBuc3UPkH1HixuLjaCnHhBVCvQohhfGH9ae6wE=
Subject key identifier:   6E:EB:03:B2:DC:55:3C:5E:89:85:C5:85:57:7C:9B:10:F2:49:71:98
Certificate issuer:       /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial:       0738
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/busDstxVPF6JhcWFV3ybEPJJcZg.roa
Signing time:             Fri 01 Sep 2023 09:34:17 +0000
ROA not before:           Fri 01 Sep 2023 09:34:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131677
IP address blocks:        2405:e4c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
        Validity
            Not Before: Sep  1 09:34:17 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6EEB03B2DC553C5E8985C585577C9B10F2497198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:67:10:9f:2c:43:b0:16:68:ad:bc:a9:86:
                    29:94:b3:48:19:00:12:5b:ec:66:d0:5e:99:32:c8:
                    63:d9:f4:31:3b:78:2a:58:01:61:63:a1:39:a9:33:
                    8c:7b:d1:8f:7e:0f:64:74:ef:11:5d:2a:4a:45:66:
                    aa:22:eb:72:50:c9:91:22:fb:60:24:d6:c0:f9:f7:
                    c6:0b:88:ea:60:93:5a:1c:a1:38:c1:5c:ff:23:68:
                    b2:6e:68:d5:d9:f6:7d:cf:be:cf:87:47:3b:dd:0c:
                    65:07:b5:19:c3:5c:d6:30:03:31:bf:08:9d:84:50:
                    2a:dd:80:12:99:00:a8:fe:a5:bf:80:e0:63:80:77:
                    06:08:1f:55:f7:99:76:85:bc:27:62:c7:9f:a5:53:
                    25:19:0b:39:82:61:2c:e3:21:10:21:f9:21:e7:a0:
                    6f:f9:20:d1:26:d5:c2:35:76:74:b6:9e:10:db:ab:
                    d3:be:eb:75:9e:04:75:b4:f7:d2:47:48:03:87:b0:
                    f3:56:03:a3:53:66:28:77:28:5d:3f:5d:b2:5d:f7:
                    99:07:1f:36:64:71:50:de:00:e0:6c:c0:97:96:de:
                    41:74:b4:c8:ed:88:d3:27:26:74:36:35:c5:56:73:
                    73:e7:78:f6:35:ed:11:56:d8:c9:89:d3:81:1d:62:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:03:B2:DC:55:3C:5E:89:85:C5:85:57:7C:9B:10:F2:49:71:98
            X509v3 Authority Key Identifier:
                keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/busDstxVPF6JhcWFV3ybEPJJcZg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:d8:fa:fb:0d:dc:2c:fd:39:20:20:a9:c2:f8:4d:26:d4:96:
         6b:29:14:f7:3c:e1:80:ea:ad:6c:cf:c6:4e:4b:3c:a6:b7:e1:
         d6:89:ef:39:d6:ba:1a:53:c0:1e:0b:fd:90:31:81:0e:68:fc:
         84:71:4f:68:65:99:a6:fb:b4:a7:e3:62:44:50:60:a2:24:d8:
         97:ee:2d:87:d5:44:8b:ae:34:64:28:cf:d5:90:99:63:08:da:
         27:b6:d5:8d:29:d3:9d:14:2c:10:f8:1c:b7:c8:97:5e:78:e1:
         a1:e8:62:6d:c2:6e:24:11:ea:74:04:ec:57:68:3e:be:37:e9:
         07:d1:11:b1:1e:89:cc:44:6a:7e:2d:cd:ad:9b:4c:da:40:71:
         ad:d5:b8:50:e6:df:ea:98:33:5d:cb:25:ee:0a:02:c9:76:00:
         20:18:04:29:71:48:43:24:b2:81:3e:8c:ff:2e:93:25:75:b5:
         de:7a:dd:27:75:7d:40:23:bb:fe:96:1e:c0:ce:5f:75:d2:3e:
         e2:51:fa:60:83:7c:db:fb:d3:82:fc:d6:8d:e0:37:44:08:af:
         03:65:87:a9:13:1e:53:26:4a:34:fb:76:b1:cb:ad:fa:93:30:
         43:39:ca:f2:a5:a4:71:79:25:2e:4a:17:a3:5b:a4:6d:5f:ce:
         46:1c:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----