Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa
File:                     nr1dK64XU8DbfTYpbIsA7xLLzqg.roa (raw, json)
Hash identifier:          DkMH85dSvJQEADM16u4jfIB9TqE72YsAtfaCTEJ2KEg=
Subject key identifier:   9E:BD:5D:2B:AE:17:53:C0:DB:7D:36:29:6C:8B:00:EF:12:CB:CE:A8
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       12A8
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa
Signing time:             Mon 12 Feb 2024 16:33:12 +0000
ROA not before:           Mon 12 Feb 2024 16:33:12 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     14618
IP address blocks:        2403:aac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4776 (0x12a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Feb 12 16:33:12 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9EBD5D2BAE1753C0DB7D36296C8B00EF12CBCEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:02:97:19:51:f0:6d:fe:11:5e:f9:07:b6:
                    1a:84:b1:29:9c:45:a5:fb:1f:13:c9:72:d1:2c:0a:
                    b1:46:0b:5e:2c:38:cb:97:5a:7b:de:dd:eb:4b:c2:
                    e0:10:a7:38:54:1f:2b:cb:42:d3:2c:3d:74:c8:43:
                    90:2a:82:6d:df:83:23:89:d5:19:4a:58:b6:9b:a8:
                    03:6e:0f:e4:16:8c:dc:6d:f8:52:09:f2:4f:01:7b:
                    0d:fc:a5:66:ee:7b:b9:f7:6f:0c:45:d9:d3:03:4e:
                    52:5a:54:48:d0:60:78:c9:ff:58:2b:77:f8:04:5a:
                    59:be:3e:5d:40:be:f0:19:63:cf:f8:8c:a3:7f:1f:
                    12:cb:2d:d7:dd:4c:95:39:b2:3a:61:97:cc:14:ef:
                    67:8a:8e:69:bb:c9:53:98:25:36:cb:37:83:0f:be:
                    07:64:0d:ae:09:f5:6e:f6:9d:58:ca:5c:df:09:c0:
                    ab:2b:b7:3d:cd:85:59:f2:ce:4b:bf:9f:a6:cd:6c:
                    ee:e3:33:cf:0a:25:be:30:d6:4c:b7:e0:af:f7:1b:
                    78:b2:66:8b:98:3c:c3:60:fe:d0:87:71:7e:51:8e:
                    b9:d8:5b:ea:f1:3c:58:04:d3:33:9b:85:e2:e7:c5:
                    7e:f0:ab:7a:d4:5e:1d:74:40:19:73:e2:ad:be:0a:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BD:5D:2B:AE:17:53:C0:DB:7D:36:29:6C:8B:00:EF:12:CB:CE:A8
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:aac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:c4:f4:29:36:47:cb:ec:a9:bd:8e:2b:fc:ff:b8:cd:01:
         25:cf:0f:b7:1d:97:6c:11:08:e6:f5:56:1f:dd:30:2c:3f:a4:
         1c:03:6f:14:8a:26:1d:45:24:a9:9e:c4:9f:1b:26:e4:54:d9:
         2e:0b:22:b0:0a:c3:f1:42:be:9f:e0:cd:ee:de:f5:ca:08:50:
         10:5a:3b:50:13:a7:a2:12:5c:e9:66:20:4e:ce:4d:88:0f:34:
         13:86:47:c3:6f:1d:2a:85:80:f5:d2:4b:77:09:4d:2b:43:91:
         1c:e6:6e:3b:d4:f2:a3:f3:6b:23:5e:8e:cc:90:0c:a5:4d:26:
         e7:dd:65:42:c4:49:9b:a3:c6:7e:e6:09:51:e0:f9:06:c9:b1:
         93:aa:e6:12:63:3a:2d:39:73:b7:5a:c0:1e:0c:43:9f:b5:8e:
         13:51:82:a0:30:6e:d9:11:ba:6b:1f:3c:a8:25:61:74:5d:6c:
         f2:8b:c1:48:bb:54:77:1e:d0:f3:78:34:6a:2d:b7:ab:b8:6a:
         0b:11:12:49:21:b1:14:24:15:48:1c:3e:ff:cc:f8:cb:8a:76:
         e7:ca:49:9f:a2:58:81:71:e5:bf:ce:d8:64:bc:47:c1:4a:5c:
         03:30:60:a9:b8:48:57:72:02:c3:c1:c8:aa:45:45:66:fd:e2:
         cd:ed:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----