Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tG2dlZhv0feikViyR37f9WqVqeU.roa
File:                     tG2dlZhv0feikViyR37f9WqVqeU.roa (raw, json)
Hash identifier:          D1TE4KlGXqB7b0kJndeyLzyd9a/YPA+FiW/rQIK8LMA=
Subject key identifier:   B4:6D:9D:95:98:6F:D1:F7:A2:91:58:B2:47:7E:DF:F5:6A:95:A9:E5
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       10DE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tG2dlZhv0feikViyR37f9WqVqeU.roa
Signing time:             Tue 25 Jun 2024 01:54:49 +0000
ROA not before:           Tue 25 Jun 2024 01:54:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     135596
IP address blocks:        60.198.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4318 (0x10de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Jun 25 01:54:49 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B46D9D95986FD1F7A29158B2477EDFF56A95A9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:b4:98:03:2d:16:ec:03:b2:49:16:24:33:
                    46:20:e4:84:1a:01:75:8f:f3:06:9c:10:6f:84:39:
                    0c:2d:03:ad:54:86:2b:08:14:da:b8:08:64:a3:14:
                    1f:f0:7f:89:4b:64:93:1d:4c:2e:85:cb:9a:95:0f:
                    b4:99:d5:9f:a6:58:10:a8:1c:ff:e9:12:3d:74:f8:
                    51:15:2c:66:4f:49:ad:59:f1:80:58:27:0f:a6:bb:
                    22:44:75:a0:14:f5:6e:d4:73:fc:f7:fb:df:f9:78:
                    f3:7c:73:87:28:46:ba:de:b5:af:97:9d:4f:6c:ce:
                    77:79:b7:72:00:07:64:c7:ad:d3:78:5d:36:7b:9e:
                    d5:1a:11:1d:e0:64:d6:fe:12:fe:15:de:bb:16:c0:
                    a1:16:39:05:35:f8:70:5e:0a:12:b9:73:c5:47:d0:
                    8a:b7:7c:8d:4d:14:b6:67:bb:2b:ca:63:10:41:60:
                    00:5a:32:f1:cc:9b:6b:7c:45:66:a7:a6:e0:45:bf:
                    01:61:8e:fe:e7:5f:f3:73:81:07:ff:ca:55:1b:07:
                    38:ed:66:fd:c7:4c:03:c4:a1:96:99:8e:6d:7f:b7:
                    5a:1f:a1:a8:1a:06:be:ba:57:6e:3d:4d:1b:a8:e1:
                    2b:eb:36:90:9c:35:11:0c:ed:2d:bc:b5:01:6a:0d:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6D:9D:95:98:6F:D1:F7:A2:91:58:B2:47:7E:DF:F5:6A:95:A9:E5
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/tG2dlZhv0feikViyR37f9WqVqeU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:50:37:29:be:af:be:dd:1f:c6:fb:4f:bf:fa:c0:c3:73:
         91:51:67:14:1f:d3:dd:36:75:c9:85:20:9b:a9:a1:dc:aa:b5:
         bd:fb:90:15:2e:b1:f3:7a:11:47:ac:8c:f0:cb:30:b6:65:2a:
         18:4f:19:c9:be:44:ae:14:2f:b2:d6:ae:5d:5e:3c:60:61:4e:
         25:68:80:bd:c2:b9:34:2b:28:03:33:dc:77:63:df:f3:4c:0c:
         50:7b:f2:e9:68:34:35:52:ca:8b:dd:38:3b:d5:a9:50:aa:a3:
         6d:ae:7a:71:92:55:1c:f5:7a:c4:2a:a7:37:e0:ff:1e:6e:6b:
         01:2b:24:74:7e:ea:5f:25:2a:41:a5:74:7e:2e:0b:36:34:f3:
         fe:33:52:e0:4b:2f:cf:85:50:9e:30:bc:c1:fb:60:19:02:dc:
         27:46:e4:aa:2f:90:c4:28:4d:22:87:81:b1:50:43:8f:9b:80:
         48:6f:c9:44:ab:d3:e2:76:c4:3c:94:c7:ff:0e:15:27:ff:f6:
         96:a5:16:dd:70:8d:87:7c:79:70:65:ba:f6:34:46:ba:7a:c7:
         4d:b8:2e:5a:10:f5:ed:98:d5:95:bb:f6:60:73:6a:3b:72:14:
         9d:6f:fb:d9:db:ac:0f:5b:88:2f:32:3e:fa:3a:48:99:6e:d0:
         fe:51:30:91
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA2MjUw
MTU0NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI0NkQ5RDk1OTg2RkQx
RjdBMjkxNThCMjQ3N0VERkY1NkE5NUE5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyiLSYAy0W7AOySRYkM0Yg5IQaAXWP8wacEG+EOQwtA61UhisI
FNq4CGSjFB/wf4lLZJMdTC6Fy5qVD7SZ1Z+mWBCoHP/pEj10+FEVLGZPSa1Z8YBY
Jw+muyJEdaAU9W7Uc/z3+9/5ePN8c4coRrreta+XnU9sznd5t3IAB2THrdN4XTZ7
ntUaER3gZNb+Ev4V3rsWwKEWOQU1+HBeChK5c8VH0Iq3fI1NFLZnuyvKYxBBYABa
MvHMm2t8RWanpuBFvwFhjv7nX/NzgQf/ylUbBzjtZv3HTAPEoZaZjm1/t1ofoaga
Br66V249TRuo4SvrNpCcNREM7S28tQFqDXQ/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUtG2dlZhv0feikViyR37f9WqVqeUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvdEcyZGxaaHYwZmVpa1Zp
eVIzN2Y5V3FWcWVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzGmTANBgkqhkiG9w0BAQsFAAOCAQEADLhQNym+r77dH8b7T7/6wMNzkVFnFB/T
3TZ1yYUgm6mh3Kq1vfuQFS6x83oRR6yM8MswtmUqGE8Zyb5ErhQvstauXV48YGFO
JWiAvcK5NCsoAzPcd2Pf80wMUHvy6Wg0NVLKi904O9WpUKqjba56cZJVHPV6xCqn
N+D/Hm5rASskdH7qXyUqQaV0fi4LNjTz/jNS4Esvz4VQnjC8wftgGQLcJ0bkqi+Q
xChNIoeBsVBDj5uASG/JRKvT4nbEPJTH/w4VJ//2lqUW3XCNh3x5cGW69jRGunrH
TbguWhD17ZjVlbv2YHNqO3IUnW/72dusD1uILzI++jpImW7Q/lEwkQ==
-----END CERTIFICATE-----