Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa
File:                     3nXdg-8WyEpyjsMbBgBBmX79z4s.roa (raw, json)
Hash identifier:          PlPYfEyAsvlG4JiIx6quKIkAtamCi+iu8rMJ+pvIERs=
Subject key identifier:   DE:75:DD:83:EF:16:C8:4A:72:8E:C3:1B:06:00:41:99:7E:FD:CF:8B
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0BC8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa
Signing time:             Fri 01 Sep 2023 09:40:40 +0000
ROA not before:           Fri 01 Sep 2023 09:40:40 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9676
IP address blocks:        2402:9c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3016 (0xbc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep  1 09:40:40 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DE75DD83EF16C84A728EC31B060041997EFDCF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:23:77:fe:33:a9:c0:1e:97:21:c2:4b:de:
                    6b:96:e6:11:04:0c:b9:16:d3:01:6a:6a:ef:dc:ca:
                    3b:09:cf:90:e8:4f:b1:f7:ee:5d:f0:dd:b3:0b:11:
                    6e:f1:99:87:f7:71:2b:e9:b3:8e:e0:fc:19:f3:5f:
                    9a:e6:4d:7e:61:fb:e1:95:61:6d:ed:cb:34:94:68:
                    c0:a6:6c:f6:52:40:6a:9c:38:22:a6:e0:88:93:ee:
                    2c:b7:00:fe:36:4f:67:30:fa:3f:6e:af:51:e2:37:
                    09:78:7e:93:9e:ea:c0:a9:b4:1d:ff:37:47:76:b2:
                    f6:6d:d7:b5:ce:d8:db:7c:c6:95:0d:e6:09:aa:5f:
                    46:50:db:01:da:e4:70:14:06:82:25:9a:21:fe:86:
                    7e:81:15:77:ae:e9:88:8a:d4:43:a8:88:e9:55:36:
                    1a:0f:65:5a:66:40:4d:9e:f0:02:7b:73:7e:d6:e1:
                    2c:b5:5f:a2:0b:c2:ae:6d:2e:93:31:e6:1b:60:7e:
                    f7:9d:9e:4e:ec:e5:68:c4:7f:0c:12:a7:30:13:ca:
                    c5:c3:4e:a9:03:e4:1c:a2:e9:6e:6f:9f:23:3b:cb:
                    6f:5f:88:51:86:d9:e5:0f:47:09:49:25:28:3e:2b:
                    23:8f:29:3e:0d:e3:28:df:11:19:51:df:81:c6:bd:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:DD:83:EF:16:C8:4A:72:8E:C3:1B:06:00:41:99:7E:FD:CF:8B
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3nXdg-8WyEpyjsMbBgBBmX79z4s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:33:d2:34:58:af:88:78:2f:a2:71:d5:cd:6f:d8:d6:a8:
         ff:76:95:9e:2f:e1:8b:9a:26:6a:db:9e:a8:c0:2d:8a:5b:94:
         3d:6d:5c:ab:c9:11:a8:99:37:91:14:17:c5:6d:af:6a:a6:e0:
         5c:32:7e:53:a0:32:d4:87:ed:7d:c1:8e:d6:1e:5d:b4:bd:ee:
         7c:c8:a8:4f:b0:12:95:fa:55:bb:9c:6f:07:24:64:4f:b7:99:
         c6:d4:e6:02:ea:0e:6a:72:a8:01:6a:b4:fc:9b:c1:03:2d:d6:
         f7:d3:96:d3:c0:a7:6f:6b:11:19:1b:0e:cd:73:67:b3:4b:ea:
         e9:03:fa:6d:71:ff:98:02:80:19:71:6e:10:06:b5:08:fa:f3:
         aa:1e:73:fe:fa:49:26:11:87:c5:a1:07:bb:84:7b:b9:ad:5c:
         00:a7:33:7c:5b:4e:d0:6c:65:ff:ee:f1:66:0a:7b:ec:b1:3d:
         1b:c3:55:46:60:f4:3d:ff:8b:d5:35:77:19:7f:c6:5b:2b:7d:
         5e:5d:49:36:f2:79:e4:69:cb:60:7d:62:9b:bd:f0:db:f7:80:
         1a:45:31:e8:32:b4:ae:27:73:ab:13:b4:f6:db:99:06:61:cb:
         cf:17:7a:7a:b3:65:d8:9a:db:36:1a:f0:e6:4c:5f:2d:a7:9a:
         2f:d5:ff:d2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw
OTQwNDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFNzVERDgzRUYxNkM4
NEE3MjhFQzMxQjA2MDA0MTk5N0VGRENGOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgTiN3/jOpwB6XIcJL3muW5hEEDLkW0wFqau/cyjsJz5DoT7H3
7l3w3bMLEW7xmYf3cSvps47g/BnzX5rmTX5h++GVYW3tyzSUaMCmbPZSQGqcOCKm
4IiT7iy3AP42T2cw+j9ur1HiNwl4fpOe6sCptB3/N0d2svZt17XO2Nt8xpUN5gmq
X0ZQ2wHa5HAUBoIlmiH+hn6BFXeu6YiK1EOoiOlVNhoPZVpmQE2e8AJ7c37W4Sy1
X6ILwq5tLpMx5htgfvednk7s5WjEfwwSpzATysXDTqkD5Byi6W5vnyM7y29fiFGG
2eUPRwlJJSg+KyOPKT4N4yjfERlR34HGvZQNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU3nXdg+8WyEpyjsMbBgBBmX79z4swHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vM25YZGctOFd5RXB5anNN
YkJnQkJtWDc5ejRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQCnAAwDQYJKoZIhvcNAQELBQADggEBALA1M9I0WK+IeC+icdXNb9jWqP92lZ4v
4YuaJmrbnqjALYpblD1tXKvJEaiZN5EUF8Vtr2qm4FwyflOgMtSH7X3BjtYeXbS9
7nzIqE+wEpX6VbucbwckZE+3mcbU5gLqDmpyqAFqtPybwQMt1vfTltPAp29rERkb
Ds1zZ7NL6ukD+m1x/5gCgBlxbhAGtQj686oec/76SSYRh8WhB7uEe7mtXACnM3xb
TtBsZf/u8WYKe+yxPRvDVUZg9D3/i9U1dxl/xlsrfV5dSTbyeeRpy2B9Ypu98Nv3
gBpFMegytK4nc6sTtPbbmQZhy88XenqzZdia2zYa8OZMXy2nmi/V/9I=
-----END CERTIFICATE-----