Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Mc9yXdxwWPS44srqUpZFx0p4w_c.roa
File:                     Mc9yXdxwWPS44srqUpZFx0p4w_c.roa (raw, json)
Hash identifier:          BV5zdrkg/idnOth3lB+qotxRYusLAzQgerZc6N9rfDQ=
Subject key identifier:   31:CF:72:5D:DC:70:58:F4:B8:E2:CA:EA:52:96:45:C7:4A:78:C3:F7
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0C08
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Mc9yXdxwWPS44srqUpZFx0p4w_c.roa
Signing time:             Fri 22 Dec 2023 07:56:32 +0000
ROA not before:           Fri 22 Dec 2023 07:56:32 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24157
IP address blocks:        2403:c300::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 22 07:56:32 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=31CF725DDC7058F4B8E2CAEA529645C74A78C3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:38:eb:56:f9:47:c2:0b:a0:19:f8:25:76:
                    3b:7b:39:ce:c4:a1:7f:6b:40:ce:72:c3:b6:91:c9:
                    2c:9b:a5:b9:80:d3:8e:2f:0e:58:36:72:1b:5c:aa:
                    9d:b4:75:f5:b2:e3:fe:7c:b6:21:b3:4e:76:b5:3c:
                    70:37:eb:9e:1c:31:4c:9f:fe:06:40:3e:74:ee:2f:
                    38:75:c5:06:4a:cb:bc:31:fb:84:35:d4:66:2e:0b:
                    6c:df:a0:24:66:ce:76:45:67:5d:d9:6a:1d:4b:2b:
                    ec:b8:f6:87:05:4e:85:6c:37:7c:46:f5:49:cc:16:
                    26:3a:79:f6:54:6c:00:2e:f2:f7:ef:cd:de:cd:d1:
                    3b:ed:e8:88:c8:c0:e7:27:50:bd:a7:a1:3f:9f:87:
                    de:30:bd:ab:4a:27:ab:80:98:7b:54:d7:bd:70:3e:
                    e5:78:58:2f:f3:89:35:4d:f4:6f:5b:fd:d5:4b:ad:
                    3e:3e:a1:5b:ec:ab:2d:8c:26:95:a1:7b:c7:eb:d6:
                    f2:59:43:eb:13:7a:4c:0c:26:eb:6d:e3:4f:7b:49:
                    90:8b:7b:fa:b8:58:68:0b:57:f4:3e:a4:41:72:ab:
                    ff:70:a5:b9:ff:58:b2:23:8f:de:e0:ff:d0:39:bd:
                    66:12:ce:16:76:5d:c5:71:30:31:23:d8:9d:bd:c2:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:72:5D:DC:70:58:F4:B8:E2:CA:EA:52:96:45:C7:4A:78:C3:F7
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Mc9yXdxwWPS44srqUpZFx0p4w_c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:e4:b1:c4:68:b2:25:0a:c0:cf:87:84:cf:4d:15:2d:25:
         6d:13:cb:69:37:6a:83:33:02:3b:1a:d4:df:46:54:06:e3:8b:
         bc:7e:74:79:86:3f:fb:1d:bd:8b:74:cb:f8:50:01:bb:42:2d:
         9f:ae:08:ba:78:ac:a9:0e:76:ec:00:6b:51:4a:e8:31:20:e5:
         46:21:2b:3c:d1:9b:a3:b3:63:f3:b0:1b:5b:b4:ce:82:b6:29:
         10:41:5b:9d:13:d4:3d:39:8d:76:6a:86:db:00:c0:a3:31:1d:
         aa:5c:cf:d8:a6:e9:38:0d:60:68:38:44:88:92:84:18:18:fb:
         dd:13:80:f8:fe:b4:fc:4b:39:41:c4:79:0d:6b:8d:35:e6:10:
         8c:ff:14:55:6f:81:fd:53:94:47:06:62:f3:d8:ef:43:9a:7a:
         bd:9a:11:c8:19:75:5c:fb:f2:20:21:6f:46:a1:c8:a9:b2:86:
         a8:75:04:26:89:1e:71:d7:92:6c:3e:5a:3b:01:f2:f9:e0:9c:
         cb:87:df:c7:a8:1e:31:d5:9b:0a:fd:a1:52:35:82:07:a3:c1:
         28:f8:05:59:1c:85:04:cd:37:9e:03:e2:39:bc:25:9a:e7:3a:
         6d:65:6d:e1:ca:c4:9f:d1:e2:ce:60:55:c9:f9:54:cc:24:08:
         69:ac:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----