Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/dfAZvAa7EEWMMAfEdDNcXcrTm0Q.roa
File:                     dfAZvAa7EEWMMAfEdDNcXcrTm0Q.roa (raw, json)
Hash identifier:          RECPK4XKHVYCQbhOx+KeYYUPrj/LiwCEWc1boJ+9hrc=
Subject key identifier:   75:F0:19:BC:06:BB:10:45:8C:30:07:C4:74:33:5C:5D:CA:D3:9B:44
Certificate issuer:       /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial:       0B96
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/dfAZvAa7EEWMMAfEdDNcXcrTm0Q.roa
Signing time:             Fri 01 Sep 2023 09:49:25 +0000
ROA not before:           Fri 01 Sep 2023 09:49:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131627
IP address blocks:        101.3.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2966 (0xb96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
        Validity
            Not Before: Sep  1 09:49:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=75F019BC06BB10458C3007C474335C5DCAD39B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:d8:c9:75:60:ea:c9:97:65:af:4b:05:3c:
                    9f:ef:57:f3:52:9b:9a:52:45:30:81:61:40:a7:a2:
                    59:27:5b:fb:44:b1:5c:6b:8e:f9:9e:5f:75:01:c8:
                    25:08:36:90:4c:6d:50:3f:8c:5c:68:a5:63:2c:5e:
                    ea:34:49:6d:94:34:d5:b5:a3:a9:0c:f2:3b:02:3b:
                    d0:d2:e4:ac:82:c4:45:1d:c3:a8:d7:d0:a6:b4:ec:
                    83:74:06:1c:14:6d:db:a0:75:1e:92:45:3e:cc:da:
                    12:34:4f:3a:00:73:e3:74:5a:f8:f3:bc:e3:f6:6e:
                    63:96:f2:80:e9:a9:2e:df:b3:03:4d:52:af:4d:da:
                    84:1c:eb:9c:9f:6e:a2:20:9d:96:7e:fe:93:93:d9:
                    a1:1c:25:a2:88:96:7d:da:7a:04:31:32:6b:cc:cc:
                    01:66:ae:e0:c4:bc:7f:81:b8:04:57:67:ad:38:a1:
                    1f:00:fe:1e:73:bd:c8:cc:8f:00:e0:6d:19:72:8c:
                    13:ad:ff:8b:5c:75:d0:dc:64:d6:7a:cb:1f:d7:7c:
                    97:2b:03:39:64:b6:66:5d:dd:5c:79:fb:0f:dd:65:
                    3c:e9:7e:c2:61:ee:58:3a:42:4e:f1:85:ed:af:9f:
                    48:6c:b1:84:be:90:44:92:01:33:9e:23:d0:63:40:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:19:BC:06:BB:10:45:8C:30:07:C4:74:33:5C:5D:CA:D3:9B:44
            X509v3 Authority Key Identifier:
                keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/dfAZvAa7EEWMMAfEdDNcXcrTm0Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.3.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:1a:84:1f:53:a2:98:39:33:c1:d3:37:d1:84:e6:2a:4e:d4:
         d7:5e:28:06:5d:27:23:9b:f5:bc:41:f0:26:ea:e5:dc:fb:db:
         96:63:b0:93:5c:a2:4d:f9:d3:eb:a3:bf:c8:c7:e8:16:6b:d9:
         4a:bc:b1:ae:ef:67:27:c9:ed:16:31:95:ee:4e:b8:9b:45:ab:
         a0:07:81:a2:04:59:5b:69:73:9f:e8:78:91:7a:33:ee:81:f1:
         09:f5:8b:c8:44:61:6c:79:69:eb:4c:3b:e6:8e:c2:79:f6:51:
         73:ae:b6:f7:2a:cb:3d:79:10:b3:f9:17:56:e1:93:2d:fb:23:
         d1:94:91:dc:63:d1:bd:2e:02:c2:a5:7c:48:27:8b:aa:02:fc:
         06:c2:60:69:32:80:7c:b3:45:53:27:9d:95:40:be:9a:d7:4b:
         aa:c9:f0:86:fb:8e:dd:54:7f:0c:76:43:9f:4f:78:9e:0c:b6:
         4f:68:d8:64:9a:b8:0c:ee:cc:6f:a3:68:09:a4:9a:01:e0:0d:
         66:52:b9:a3:2d:90:c4:32:e1:28:d6:cf:6a:15:bd:ce:c1:ff:
         e5:1b:65:f1:e1:33:8f:ed:8f:97:5e:5e:66:a4:dc:14:2a:3f:
         b4:96:c8:75:37:2d:5f:e3:7e:b3:f5:98:b8:a7:a5:8a:95:3e:
         4e:c9:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----