Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/w5GmwTZzG9ojS9JmFd2RBcyW9gI.roa
File:                     w5GmwTZzG9ojS9JmFd2RBcyW9gI.roa (raw, json)
Hash identifier:          /jFvAtjQfCYadGcfUxD8QcsDc9VInXdqVnetmZbgGr0=
Subject key identifier:   C3:91:A6:C1:36:73:1B:DA:23:4B:D2:66:15:DD:91:05:CC:96:F6:02
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0B31
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/w5GmwTZzG9ojS9JmFd2RBcyW9gI.roa
Signing time:             Fri 01 Sep 2023 09:34:43 +0000
ROA not before:           Fri 01 Sep 2023 09:34:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4781
IP address blocks:        210.63.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Sep  1 09:34:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C391A6C136731BDA234BD26615DD9105CC96F602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9b:f3:2f:76:c9:12:ff:81:ef:ec:a7:99:25:
                    2a:f7:b4:18:2b:c5:24:8e:76:c7:bb:a0:93:11:14:
                    a7:14:7e:9b:55:c6:52:c8:f3:bc:56:ba:eb:ca:f9:
                    58:18:a7:60:88:d9:fc:fb:67:9a:81:83:a1:0b:15:
                    ff:4d:79:a6:55:57:a7:9e:9f:0d:1c:cb:22:0c:7e:
                    00:fc:e9:dc:f3:c7:e0:63:3f:87:61:7e:bf:0d:b7:
                    5d:a9:9c:c9:9e:cc:fc:08:20:ee:3c:0f:0a:16:79:
                    13:5b:1b:57:d7:2a:04:b6:fe:e6:88:fd:fe:8e:d0:
                    43:1a:22:45:59:03:36:27:1c:64:1e:d9:77:44:4f:
                    a1:df:5e:b9:eb:5d:6b:ff:34:74:54:10:40:f4:1d:
                    26:85:a1:9d:28:39:91:89:97:b7:41:05:c3:3e:c1:
                    c9:3d:bf:72:0d:9a:1c:e8:2f:9c:31:a0:5b:86:11:
                    8c:ae:98:02:bc:49:0a:b0:cb:98:78:7f:38:78:0e:
                    2c:41:11:9f:08:69:79:3d:b0:d6:47:b3:ee:8c:88:
                    5b:b4:2f:dd:6c:bd:63:d4:28:5f:9d:8e:0a:a2:24:
                    ad:5b:d2:32:17:a3:54:42:bc:20:f7:70:54:2e:b5:
                    05:d6:c2:12:35:07:d6:f8:bb:1d:ec:ff:30:4f:29:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:91:A6:C1:36:73:1B:DA:23:4B:D2:66:15:DD:91:05:CC:96:F6:02
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/w5GmwTZzG9ojS9JmFd2RBcyW9gI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:f9:50:2b:3a:5d:e9:a6:9c:8d:80:c0:09:42:f9:64:d8:
         25:d5:64:f6:61:7c:51:a8:e4:a4:e6:ad:2f:b4:53:a4:bc:bc:
         b1:42:b3:94:7f:53:f4:fd:a1:39:5a:20:0c:96:71:5a:fa:0b:
         f7:9c:11:de:8e:aa:b3:26:6d:bd:d8:de:2c:82:20:f9:fb:fd:
         37:54:97:bd:13:9b:b4:e9:68:72:f4:1b:54:7f:e4:ec:ee:53:
         8a:89:06:1c:6c:3f:c9:13:ac:f2:5a:c9:0b:42:20:32:6e:7a:
         0a:0a:4b:96:4c:4d:f2:fc:5b:59:e2:b1:68:6d:76:e3:22:b9:
         eb:fd:df:44:87:3b:3d:4a:62:84:43:fc:5a:58:d2:37:a3:4b:
         78:69:b3:b3:f6:a1:97:e6:0d:0c:07:5f:2f:02:75:92:91:28:
         3d:e0:db:90:fc:dd:12:43:6d:2a:fd:07:fc:cf:c4:13:5c:12:
         f3:9d:13:0d:31:fe:59:b2:23:2a:26:18:80:4d:6b:0b:0d:49:
         5c:9d:f2:0f:15:99:ed:90:48:f1:91:e7:87:c7:7a:8d:2c:04:
         28:ee:2a:7f:a9:b8:cf:78:2f:73:fe:ae:d2:c3:d0:a5:e4:f2:
         4b:fe:8c:51:86:fe:3f:10:23:e6:cf:38:1c:a9:9f:9a:41:96:
         e0:01:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----