Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/OrST4BZoqmvc2lRtT1PKyZcUkww.roa
File:                     OrST4BZoqmvc2lRtT1PKyZcUkww.roa (raw, json)
Hash identifier:          PJt5iidbFDX8EsT7ZnjVWnvhMUn5xm/0Xkh1LKbGPy0=
Subject key identifier:   3A:B4:93:E0:16:68:AA:6B:DC:DA:54:6D:4F:53:CA:C9:97:14:93:0C
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       0CDE
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/OrST4BZoqmvc2lRtT1PKyZcUkww.roa
Signing time:             Fri 01 Sep 2023 09:39:52 +0000
ROA not before:           Fri 01 Sep 2023 09:39:52 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38843
IP address blocks:        2400:b380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3294 (0xcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Sep  1 09:39:52 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3AB493E01668AA6BDCDA546D4F53CAC99714930C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:4d:37:81:6b:8b:30:b0:ee:99:d0:d9:9d:
                    c7:94:97:ee:08:a6:6e:76:c8:39:8b:1a:1f:58:47:
                    2d:36:09:e4:41:1f:a2:a9:de:bb:4d:92:a4:3b:c5:
                    e6:76:8d:0c:f4:96:22:1d:5b:d8:be:cd:3a:70:77:
                    3f:f6:d1:a0:c5:a3:a2:bc:0f:ae:3a:c2:de:51:8d:
                    e3:7d:6f:0a:1a:1c:c9:c4:11:e9:d2:28:0c:66:85:
                    19:21:4a:f2:e4:ca:23:f2:21:ba:25:2a:44:c9:ae:
                    ca:12:60:22:59:91:28:59:5e:54:8d:92:1f:60:8a:
                    4a:69:af:98:74:7f:d8:89:25:13:3d:e6:ff:0e:34:
                    5b:f7:63:47:70:96:35:14:64:21:98:f5:4f:7a:66:
                    7e:cb:5a:ff:98:b4:f4:d8:c2:56:25:56:4c:c5:74:
                    60:ce:6b:b5:f6:6b:61:76:c5:a4:7a:64:e2:d8:06:
                    2a:d2:e6:9a:b3:10:cf:0b:03:17:1a:f0:f6:99:e7:
                    68:01:81:ee:23:60:dd:0e:89:31:39:ac:89:5f:76:
                    e0:86:cc:a4:31:3f:47:0c:6e:99:6e:28:37:67:e2:
                    52:a8:c0:f2:ab:c9:ec:36:5a:2d:92:37:6a:e4:d4:
                    57:2a:7b:4a:86:ea:20:1c:89:20:f5:da:5c:1b:94:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B4:93:E0:16:68:AA:6B:DC:DA:54:6D:4F:53:CA:C9:97:14:93:0C
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/OrST4BZoqmvc2lRtT1PKyZcUkww.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b380::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:04:c8:aa:c7:b0:a0:ec:e0:71:10:85:c5:aa:70:f2:15:
         0e:78:2a:fd:ad:ff:35:66:71:4f:33:b0:5a:ed:7f:f5:eb:79:
         01:75:0f:11:9a:a5:3f:e7:48:d4:3f:93:16:d8:c6:60:09:fc:
         1f:05:6f:93:67:4c:ab:51:1c:1a:64:fa:7a:0b:15:18:3f:12:
         0f:8d:b3:c7:64:4a:e6:fe:58:45:1c:ca:dd:fb:73:72:b0:ce:
         03:f9:3e:d5:f2:a4:6e:22:d4:62:6f:e2:23:09:3b:5f:d5:08:
         2d:83:a4:a9:60:e5:cd:b6:11:08:82:31:54:0c:81:78:92:03:
         c7:fe:07:53:ef:d0:87:8d:4f:bc:fd:3b:9f:6f:81:71:98:80:
         6d:9a:ca:4a:b3:21:bf:77:99:47:35:31:25:da:83:bc:b0:21:
         5a:ea:75:54:e0:2a:d9:d4:d3:e4:f8:62:86:74:06:96:30:b6:
         b1:52:0e:05:87:12:61:d2:63:a4:68:dd:87:95:e8:3f:48:c3:
         e0:a9:9a:dc:c7:cb:17:11:f2:d7:e0:cf:dd:04:21:5d:cd:06:
         4d:81:41:65:92:c8:ae:5c:f8:0e:9b:ba:05:7d:81:1a:af:a4:
         30:ec:08:ac:7f:62:70:35:a5:6a:8c:b5:bd:96:fc:b2:f8:a4:
         8b:5b:8a:ed
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw
OTM5NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNBQjQ5M0UwMTY2OEFB
NkJEQ0RBNTQ2RDRGNTNDQUM5OTcxNDkzMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiO003gWuLMLDumdDZnceUl+4Ipm52yDmLGh9YRy02CeRBH6Kp
3rtNkqQ7xeZ2jQz0liIdW9i+zTpwdz/20aDFo6K8D646wt5RjeN9bwoaHMnEEenS
KAxmhRkhSvLkyiPyIbolKkTJrsoSYCJZkShZXlSNkh9gikppr5h0f9iJJRM95v8O
NFv3Y0dwljUUZCGY9U96Zn7LWv+YtPTYwlYlVkzFdGDOa7X2a2F2xaR6ZOLYBirS
5pqzEM8LAxca8PaZ52gBge4jYN0OiTE5rIlfduCGzKQxP0cMbpluKDdn4lKowPKr
yew2Wi2SN2rk1Fcqe0qG6iAciSD12lwblO+fAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUOrST4BZoqmvc2lRtT1PKyZcUkwwwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vT3JTVDRCWm9xbXZjMmxSdFQxUEt5
WmNVa3d3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAs4Aw
DQYJKoZIhvcNAQELBQADggEBAJ3JBMiqx7Cg7OBxEIXFqnDyFQ54Kv2t/zVmcU8z
sFrtf/XreQF1DxGapT/nSNQ/kxbYxmAJ/B8Fb5NnTKtRHBpk+noLFRg/Eg+Ns8dk
Sub+WEUcyt37c3KwzgP5PtXypG4i1GJv4iMJO1/VCC2DpKlg5c22EQiCMVQMgXiS
A8f+B1Pv0IeNT7z9O59vgXGYgG2aykqzIb93mUc1MSXag7ywIVrqdVTgKtnU0+T4
YoZ0BpYwtrFSDgWHEmHSY6Ro3YeV6D9Iw+CpmtzHyxcR8tfgz90EIV3NBk2BQWWS
yK5c+A6bugV9gRqvpDDsCKx/YnA1pWqMtb2W/LL4pItbiu0=
-----END CERTIFICATE-----