Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/ncFRZqRp6LRVgN9yTasqT3sxDLw.roa
File:                     ncFRZqRp6LRVgN9yTasqT3sxDLw.roa (raw, json)
Hash identifier:          KwNmPydN1oxtI5mwgvwWSi50KC6MiG1Ij1ucefy05ds=
Subject key identifier:   9D:C1:51:66:A4:69:E8:B4:55:80:DF:72:4D:AB:2A:4F:7B:31:0C:BC
Certificate issuer:       /CN=A61402819401D363CB1F9BFBD538875F41F211C3
Certificate serial:       0AED
Authority key identifier: A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/ncFRZqRp6LRVgN9yTasqT3sxDLw.roa
Signing time:             Fri 01 Sep 2023 09:47:16 +0000
ROA not before:           Fri 01 Sep 2023 09:47:16 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9216
IP address blocks:        211.76.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797 (0xaed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61402819401D363CB1F9BFBD538875F41F211C3
        Validity
            Not Before: Sep  1 09:47:16 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9DC15166A469E8B45580DF724DAB2A4F7B310CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:e7:aa:d2:46:57:3e:d6:9d:fc:c7:92:70:
                    c8:6c:ce:ac:39:5a:ec:d6:58:a3:8e:f3:ed:19:fb:
                    fc:9c:1a:ba:36:50:c9:c5:7f:9f:b2:d5:92:f8:7d:
                    cb:b6:68:e5:86:77:0e:af:57:3d:a0:3e:f0:7c:9f:
                    7f:04:b7:14:d2:9e:46:96:dc:ec:c7:2a:c7:d4:dc:
                    60:a5:75:78:71:29:d4:bc:5b:8a:08:04:4a:3a:06:
                    a8:a6:ea:8e:0b:ae:df:d5:aa:df:9f:48:07:fb:f3:
                    32:c3:41:ce:c2:da:ef:ea:52:6a:cb:29:28:eb:80:
                    0d:3b:e9:00:98:43:94:08:da:a4:ed:5a:8f:a2:17:
                    d2:08:8a:56:41:db:cc:73:88:24:10:f5:d5:0e:bd:
                    92:3c:42:6e:6d:f3:6e:04:78:30:3b:6f:36:0e:28:
                    2f:4e:2e:e8:c0:54:67:2a:95:87:86:24:03:af:b3:
                    22:a5:45:ae:cd:63:ac:1b:6d:6c:20:b5:c2:a5:a1:
                    74:2d:82:98:77:8a:0e:5b:16:ae:7f:e5:76:1a:5a:
                    f9:f2:b1:f6:5a:2e:ac:f0:e6:e6:3c:80:3e:f5:69:
                    d8:19:62:4a:7f:7c:56:a6:23:c1:5d:83:91:a4:c0:
                    86:1f:92:da:93:15:3d:88:c8:02:91:f6:7d:b3:85:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:51:66:A4:69:E8:B4:55:80:DF:72:4D:AB:2A:4F:7B:31:0C:BC
            X509v3 Authority Key Identifier:
                keyid:A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/ncFRZqRp6LRVgN9yTasqT3sxDLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:6b:af:14:85:89:34:2c:73:b8:8c:96:c3:76:f2:b1:ab:
         6c:79:2d:53:3c:c8:5c:d4:4a:32:a5:47:43:e9:17:c9:1b:f5:
         3c:2d:3d:57:2b:92:04:8f:05:91:8c:bf:1d:88:69:27:e0:c1:
         3a:60:c8:99:b2:c3:06:a8:88:fb:41:e6:ea:7b:cb:73:9c:13:
         5d:a0:02:fc:f4:be:50:20:13:2f:8f:0c:3f:c8:6b:08:c0:c3:
         1d:e4:26:3d:eb:12:97:1c:7f:a9:67:4f:89:b7:5e:eb:93:f7:
         62:4e:39:05:bb:1c:21:82:b1:c0:e8:51:3e:61:14:5a:cf:47:
         67:75:48:b2:00:7b:81:21:42:bc:df:02:95:a7:f6:d6:46:3b:
         ba:8e:f3:82:a9:1d:6b:8b:82:cf:a3:53:1b:ce:4d:d6:e8:7f:
         47:e1:c7:cf:f3:7d:0a:2a:df:93:fc:ad:31:0b:28:b6:a6:cb:
         ea:49:c2:9e:36:3f:f2:f6:d3:27:c3:c8:7d:28:bf:4f:cb:3e:
         cb:b9:8b:11:fa:b7:e7:7e:2d:ea:e8:08:4c:dc:eb:6b:98:35:
         46:df:67:3c:ef:7c:18:84:d7:1c:15:d0:ee:b4:f1:eb:79:56:
         b3:16:35:0b:a1:6f:2f:e4:d2:1e:3d:8e:b7:ed:d0:8c:21:92:
         76:4c:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----