Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/9Oq7CLv8tCtU_HdL9VNaeQeBhh8.roa
File:                     9Oq7CLv8tCtU_HdL9VNaeQeBhh8.roa (raw, json)
Hash identifier:          cnHLpK1n5RVV1v1Ngpr1QdvhxgsVr0JqxwSR6wP+BWI=
Subject key identifier:   F4:EA:BB:08:BB:FC:B4:2B:54:FC:77:4B:F5:53:5A:79:07:81:86:1F
Certificate issuer:       /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial:       0549
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/9Oq7CLv8tCtU_HdL9VNaeQeBhh8.roa
Signing time:             Fri 01 Sep 2023 09:46:24 +0000
ROA not before:           Fri 01 Sep 2023 09:46:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9678
IP address blocks:        2406:3040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
        Validity
            Not Before: Sep  1 09:46:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F4EABB08BBFCB42B54FC774BF5535A790781861F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:9b:68:ea:d9:32:72:06:30:2c:cb:8a:c9:
                    75:4b:f0:56:19:63:ae:5b:d6:1c:cf:ba:7e:49:5e:
                    18:0f:6a:b2:9f:df:35:9c:c6:a8:9a:7c:0c:10:4f:
                    2e:63:6a:aa:af:7e:28:5a:52:70:ed:be:7f:9c:0a:
                    d1:6e:2d:19:f3:b3:72:27:b6:a2:2c:0f:0a:09:66:
                    51:53:17:aa:1f:a8:0e:80:2b:7e:16:35:f0:8f:72:
                    b0:fe:75:78:f8:13:53:d6:12:4e:c2:41:b2:09:f6:
                    9a:0f:1a:42:6b:b4:14:d1:e6:4e:6a:be:bd:ad:19:
                    d3:aa:8f:a9:06:9c:6d:c0:8f:3e:3e:3f:4c:c8:1c:
                    63:48:62:d9:6c:40:5c:51:b1:12:73:e8:45:a7:5c:
                    33:c1:23:c8:b7:eb:63:ff:c2:fa:d7:ee:ec:7a:c8:
                    ce:9f:99:ef:b7:d6:1a:6d:ae:a1:42:95:7c:73:30:
                    83:af:5d:a0:43:20:7d:5e:dd:e8:a8:c1:49:ed:d9:
                    16:a8:74:ae:4f:d6:c2:9b:5f:50:cb:42:0c:a9:62:
                    b4:b1:7e:09:40:3e:17:e5:c1:50:bb:77:3c:f3:1c:
                    c2:ce:8a:83:46:f7:70:95:52:b2:a3:83:79:b4:84:
                    ae:19:dd:56:c2:4c:9e:cf:e9:24:df:e4:26:b2:4f:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:BB:08:BB:FC:B4:2B:54:FC:77:4B:F5:53:5A:79:07:81:86:1F
            X509v3 Authority Key Identifier:
                keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/9Oq7CLv8tCtU_HdL9VNaeQeBhh8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:53:6c:54:7d:e6:b7:b9:c1:3a:8e:de:0d:85:10:54:db:
         87:4d:c7:53:7a:ab:83:04:82:f6:70:85:4b:7c:0a:f7:7f:7d:
         af:1f:95:56:72:84:c4:10:a2:fa:4f:af:11:66:2b:c4:a1:96:
         83:a2:51:c0:71:16:89:7f:d6:fa:7d:c0:c9:86:2a:eb:e8:d8:
         4c:02:cd:29:ca:16:13:2e:b3:f6:3b:33:af:83:7b:d6:34:f1:
         72:1f:53:d7:8a:9f:b3:95:90:39:bc:dd:fe:16:e9:be:1b:dd:
         7a:37:59:62:a6:dc:16:05:5d:00:fe:f0:2e:30:4e:59:74:16:
         af:6f:e8:60:81:57:8e:fc:59:d3:00:bd:ac:b9:20:28:05:14:
         9d:d4:e5:d6:58:20:32:54:a7:36:0d:20:4a:4d:6a:e0:f3:97:
         1d:f1:8b:cd:8f:5e:1c:9c:11:1c:49:93:70:40:0a:47:3f:9f:
         3d:ed:86:81:6d:7d:cf:b7:5d:4b:cf:ba:00:ea:6f:ea:b5:d7:
         0f:11:66:04:eb:58:1e:02:8f:07:5b:f8:4f:77:16:2b:93:81:
         1d:73:58:30:e9:37:34:dc:e2:80:ef:7e:c2:f6:53:de:b3:21:
         d6:45:04:d0:0d:72:62:64:e6:16:bf:34:9c:5e:c4:c7:b6:bf:
         da:ac:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----