Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa
File:                     WS0jXG_oKrBxXxYH14TcxKITTpI.roa (raw, json)
Hash identifier:          QuzEU+tU/sxWkX12VLCm2QNMFtO3wkW6sAXjQZhzxRw=
Subject key identifier:   59:2D:23:5C:6F:E8:2A:B0:71:5F:16:07:D7:84:DC:C4:A2:13:4E:92
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       12A6
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa
Signing time:             Mon 12 Feb 2024 16:32:44 +0000
ROA not before:           Mon 12 Feb 2024 16:32:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     16509
IP address blocks:        2403:aac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4774 (0x12a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Feb 12 16:32:44 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=592D235C6FE82AB0715F1607D784DCC4A2134E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:78:3f:ff:f0:c9:b5:fb:ac:8a:ae:da:63:
                    d5:59:4a:19:4e:6e:ff:8e:61:83:b5:94:ee:f9:7e:
                    67:0b:92:b8:7b:80:7b:6b:76:0f:a1:0c:30:6f:63:
                    58:76:27:67:80:d0:42:17:66:bc:10:91:ca:65:8c:
                    40:0d:b8:64:90:d6:22:d5:e4:4b:03:83:3e:f5:92:
                    a2:8b:10:f1:da:42:45:ec:bc:30:fe:26:37:f7:c1:
                    34:ed:4d:d9:da:7b:37:e4:98:28:66:7e:3c:b6:78:
                    ac:2e:01:e2:d2:74:ea:4f:b9:9b:ca:02:4b:5c:70:
                    42:0c:4c:e6:03:56:79:70:20:b3:42:64:2b:4c:e9:
                    06:b1:73:71:d2:64:3a:8f:91:c1:33:c5:6b:a2:97:
                    3e:e4:db:4f:02:80:6f:b8:e5:ab:b5:be:81:99:57:
                    9e:48:e6:24:3e:bb:5e:c3:8f:54:ab:4b:34:e3:19:
                    87:56:9a:24:35:63:1f:95:d7:e5:1f:38:5f:8a:a4:
                    e7:c5:9e:0b:51:6c:8c:c7:66:95:13:22:ed:4f:d0:
                    8f:ed:e9:40:34:5a:f5:29:88:11:3e:cc:83:3b:b4:
                    e1:dc:d1:11:6c:28:a1:b2:1d:b3:35:bc:83:30:fb:
                    83:18:17:93:aa:4e:84:3b:97:0b:72:3b:f6:3d:7b:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:23:5C:6F:E8:2A:B0:71:5F:16:07:D7:84:DC:C4:A2:13:4E:92
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:aac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:5f:57:1d:94:84:23:a6:b9:e5:c8:d2:6a:81:3c:85:4f:
         1f:bb:e0:63:12:a8:2f:33:b3:73:42:3d:72:6c:3f:3c:e8:dd:
         2b:bc:81:d0:c6:23:f3:a3:c9:e5:03:fe:76:bc:3a:41:97:d9:
         a8:19:f4:13:e7:34:15:12:fc:22:53:d3:68:c1:f7:de:99:b3:
         51:a0:03:0b:fa:1c:c0:f1:6d:39:0b:a3:41:21:c1:b6:d3:23:
         03:5e:e3:62:97:3d:2e:bb:4f:c3:81:07:a9:59:78:6b:3b:47:
         bf:52:f6:df:a3:bf:2c:a2:01:4f:de:ed:5d:98:b4:af:c1:e8:
         6d:c0:43:b0:d4:6f:ff:d8:52:79:67:37:77:b2:83:5f:47:42:
         90:01:ca:ed:88:c8:92:a1:d6:6c:88:95:68:44:7e:3d:3d:aa:
         04:e4:7b:8e:c2:9d:63:61:21:7e:bf:35:7f:30:77:f4:54:58:
         f9:18:61:a6:59:5b:9c:1b:48:cf:18:85:95:ae:74:87:74:21:
         d8:12:55:88:1a:76:ae:ba:da:a6:53:30:0a:e0:a6:1a:bd:37:
         b5:23:29:73:19:46:d2:f7:8a:6a:ba:21:2e:c4:e7:05:06:13:
         41:f4:c4:56:a9:08:57:1f:a3:d1:df:d3:2d:12:d6:a3:df:53:
         36:bc:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----