Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/-uRub_xQT5ehuD2w9dCw-94j2gQ.roa
File:                     -uRub_xQT5ehuD2w9dCw-94j2gQ.roa (raw, json)
Hash identifier:          lqkO7JbJM2BGyJHM3pgvQ90XZ7T2CgJWELvXGKnLZ4U=
Subject key identifier:   FA:E4:6E:6F:FC:50:4F:97:A1:B8:3D:B0:F5:D0:B0:FB:DE:23:DA:04
Certificate issuer:       /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial:       0B92
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/-uRub_xQT5ehuD2w9dCw-94j2gQ.roa
Signing time:             Fri 01 Sep 2023 09:49:24 +0000
ROA not before:           Fri 01 Sep 2023 09:49:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131584
IP address blocks:        43.255.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
        Validity
            Not Before: Sep  1 09:49:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FAE46E6FFC504F97A1B83DB0F5D0B0FBDE23DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:7f:ff:26:92:b8:dd:55:90:3f:c3:08:19:
                    89:e4:d9:c9:77:ea:3b:8e:b9:ec:e5:e2:9b:0c:89:
                    54:f0:a5:2d:4f:13:b2:54:71:63:62:31:e4:23:e4:
                    9c:c0:65:4f:0a:8a:20:99:b8:64:83:3c:3e:ac:02:
                    a3:94:74:54:e5:e3:b5:34:40:3f:76:f5:b1:d4:74:
                    e0:22:75:d4:70:80:31:8e:40:c8:0d:28:ab:da:f2:
                    25:72:4f:bd:7b:68:8f:61:db:36:05:e8:ca:b0:73:
                    e0:0e:48:9f:54:7c:86:c9:45:f9:7e:9b:17:46:c3:
                    07:01:d7:d1:ee:3a:a0:18:20:ec:29:c3:df:ed:59:
                    17:f8:5e:e1:60:94:67:90:84:93:29:ba:50:97:46:
                    74:97:16:da:f2:9f:77:9d:23:f8:d8:21:6c:eb:e9:
                    6c:20:6f:37:4c:0e:fc:d6:0e:22:23:2b:88:04:c9:
                    95:d9:aa:09:dc:01:d4:29:14:82:fc:58:fa:28:c4:
                    f4:a1:6a:9f:88:d8:3d:0e:f2:0e:62:6a:cc:45:51:
                    2a:0d:6f:f0:e7:f2:8b:9c:ad:67:7d:ab:a4:0b:d9:
                    39:fe:3d:de:2d:0f:1c:91:b0:34:cf:99:fb:74:30:
                    ac:f0:1c:a1:02:65:3f:a7:a8:4f:10:4b:dd:69:4c:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E4:6E:6F:FC:50:4F:97:A1:B8:3D:B0:F5:D0:B0:FB:DE:23:DA:04
            X509v3 Authority Key Identifier:
                keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/-uRub_xQT5ehuD2w9dCw-94j2gQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:67:6a:d5:fe:9e:62:66:e9:31:3c:76:68:c7:60:a2:d7:
         82:03:ab:3f:39:59:b3:19:e4:73:db:be:9b:58:79:32:23:73:
         c2:c2:5d:1a:21:64:be:29:e4:6b:3c:d4:7b:b6:14:dc:4b:4e:
         a3:2c:d6:c9:d6:af:ba:67:e1:e6:04:bd:e6:bc:e1:fa:20:e0:
         7e:c2:ff:67:f2:e8:b4:73:17:d7:ca:5f:62:ca:2e:15:ee:c1:
         42:ed:7f:79:80:da:6d:a8:65:fe:a1:7f:4b:7a:e2:94:d6:85:
         b7:ec:a1:37:79:8c:1c:d7:ca:7a:2f:93:eb:c6:8c:48:c7:39:
         39:6a:77:86:9d:f0:2e:37:a9:cf:bf:c6:7d:c9:05:a9:ae:64:
         85:2c:a7:6f:2e:e2:0d:89:f0:04:63:9a:cf:49:77:9b:22:ea:
         55:51:ed:eb:ba:5f:56:83:6b:b3:6d:ad:d4:dd:45:d6:dc:ec:
         23:2e:4d:07:38:d4:97:97:25:50:ae:55:9c:69:29:e6:44:43:
         69:4c:84:b1:84:87:99:11:2a:cd:0c:92:ab:50:c3:27:16:2b:
         e2:92:97:57:39:cd:c9:0a:d2:fa:d5:6d:37:9f:11:e0:aa:4c:
         63:e9:40:82:7a:50:f0:8e:79:44:44:bf:af:2e:2a:02:21:8d:
         98:c0:b3:4e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yMzA5MDEw
OTQ5MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZBRTQ2RTZGRkM1MDRG
OTdBMUI4M0RCMEY1RDBCMEZCREUyM0RBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5+H//JpK43VWQP8MIGYnk2cl36juOuezl4psMiVTwpS1PE7JU
cWNiMeQj5JzAZU8KiiCZuGSDPD6sAqOUdFTl47U0QD929bHUdOAiddRwgDGOQMgN
KKva8iVyT717aI9h2zYF6Mqwc+AOSJ9UfIbJRfl+mxdGwwcB19HuOqAYIOwpw9/t
WRf4XuFglGeQhJMpulCXRnSXFtryn3edI/jYIWzr6WwgbzdMDvzWDiIjK4gEyZXZ
qgncAdQpFIL8WPooxPShap+I2D0O8g5iasxFUSoNb/Dn8oucrWd9q6QL2Tn+Pd4t
DxyRsDTPmft0MKzwHKECZT+nqE8QS91pTGE7AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU+uRub/xQT5ehuD2w9dCw+94j2gQwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2Ly11UnViX3hRVDVl
aHVEMnc5ZEN3LTk0ajJnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIr/wwwDQYJKoZIhvcNAQELBQADggEBADonZ2rV/p5iZukxPHZox2Ci14ID
qz85WbMZ5HPbvptYeTIjc8LCXRohZL4p5Gs81Hu2FNxLTqMs1snWr7pn4eYEvea8
4fog4H7C/2fy6LRzF9fKX2LKLhXuwULtf3mA2m2oZf6hf0t64pTWhbfsoTd5jBzX
ynovk+vGjEjHOTlqd4ad8C43qc+/xn3JBamuZIUsp28u4g2J8ARjms9Jd5si6lVR
7eu6X1aDa7NtrdTdRdbc7CMuTQc41JeXJVCuVZxpKeZEQ2lMhLGEh5kRKs0MkqtQ
wycWK+KSl1c5zckK0vrVbTefEeCqTGPpQIJ6UPCOeUREv68uKgIhjZjAs04=
-----END CERTIFICATE-----