Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa
File:                     O7GHeH3P2AFhngjzzHn2N6OEzkE.roa (raw, json)
Hash identifier:          Hr1q9KUOiXIE6FvCU/EISlemtLPHM6emZdcMAUCjIQ4=
Subject key identifier:   3B:B1:87:78:7D:CF:D8:01:61:9E:08:F3:CC:79:F6:37:A3:84:CE:41
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0C06
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa
Signing time:             Fri 22 Dec 2023 07:56:20 +0000
ROA not before:           Fri 22 Dec 2023 07:56:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24157
IP address blocks:        2401:7080::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3078 (0xc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 22 07:56:20 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3BB187787DCFD801619E08F3CC79F637A384CE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:fe:66:fc:d7:50:18:3f:ff:dd:bc:53:2f:
                    9e:09:ec:80:f5:a6:7a:5b:c4:18:2d:c0:8e:c4:f7:
                    52:e4:26:d6:04:c9:19:2d:bc:ef:5b:d8:0d:30:41:
                    58:3f:4c:0c:51:28:7f:d0:71:5b:72:38:fd:41:bc:
                    48:02:2b:fd:8a:65:98:5f:bc:be:90:6b:3f:2d:9c:
                    76:77:fd:87:7c:d4:4f:c0:88:03:49:3f:9f:e1:d1:
                    2c:09:19:39:52:c0:9f:81:b1:c5:51:d2:55:4a:27:
                    b0:e4:d7:64:69:7f:49:f5:9c:99:cf:40:26:1a:29:
                    0e:81:85:1c:db:7f:19:98:8c:10:12:b0:34:c2:5c:
                    be:9e:4e:ed:87:e9:68:00:2c:46:92:ee:34:1f:1c:
                    67:ac:d8:b1:c5:d6:5f:c0:b7:21:34:c5:01:17:47:
                    7c:46:e8:78:5c:bf:f9:d2:65:c7:08:3f:6f:7d:5b:
                    ab:75:ec:88:44:d3:73:31:15:c5:ae:aa:82:ef:c9:
                    31:a0:74:a7:05:94:31:74:94:cc:3f:a0:49:4a:12:
                    59:d3:15:04:52:be:b3:4c:25:98:e8:69:f8:6b:ce:
                    8b:02:2b:e5:ac:88:55:b5:7c:f4:06:58:aa:36:3c:
                    bc:d1:9f:c7:58:fd:5a:b9:a0:ca:ec:5a:7d:7d:97:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B1:87:78:7D:CF:D8:01:61:9E:08:F3:CC:79:F6:37:A3:84:CE:41
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/O7GHeH3P2AFhngjzzHn2N6OEzkE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:8c:ef:48:ec:7e:59:d2:42:6e:4d:23:5d:3d:d5:a3:0b:
         f7:0c:75:1d:c2:76:0e:47:1e:4c:94:d5:8a:e1:36:ce:a8:b2:
         7b:48:aa:eb:c2:84:3e:0d:83:ca:56:fc:18:b7:89:94:5d:0e:
         15:26:29:e0:a3:14:86:fe:22:bc:22:d5:33:5a:85:d4:99:ba:
         5a:c9:57:2c:70:91:e5:cb:fe:4a:1f:31:f5:64:e5:fd:6a:a2:
         0a:ab:40:91:0a:c6:38:93:54:39:d1:64:8f:f6:52:2e:b8:7e:
         12:63:46:94:9d:32:09:b9:56:f9:c1:dc:b3:7b:0b:65:c3:3d:
         2d:7e:c2:be:82:2f:76:18:f9:f9:44:ec:75:9a:f1:c3:1e:2f:
         bf:44:38:6c:74:53:80:82:8d:8b:a1:28:be:03:5b:3f:24:0b:
         d8:c8:6a:d1:92:c3:4f:d2:54:d3:e5:c3:42:75:c9:da:d8:c2:
         42:54:23:68:cb:3b:47:99:82:b5:04:6d:be:9c:47:bf:35:e6:
         b2:fd:62:8a:5c:c5:b8:20:fb:2c:c8:03:c4:18:6c:25:36:c9:
         a3:1f:9a:92:9a:89:57:22:d6:9d:d8:d1:9f:3d:90:59:a3:a9:
         d2:05:c5:69:bc:ab:ed:8b:a7:69:f1:b4:1f:ec:3c:7f:27:11:
         0f:a7:ed:d7
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzEyMjIw
NzU2MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNCQjE4Nzc4N0RDRkQ4
MDE2MTlFMDhGM0NDNzlGNjM3QTM4NENFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQiP5m/NdQGD//3bxTL54J7ID1pnpbxBgtwI7E91LkJtYEyRkt
vO9b2A0wQVg/TAxRKH/QcVtyOP1BvEgCK/2KZZhfvL6Qaz8tnHZ3/Yd81E/AiANJ
P5/h0SwJGTlSwJ+BscVR0lVKJ7Dk12Rpf0n1nJnPQCYaKQ6BhRzbfxmYjBASsDTC
XL6eTu2H6WgALEaS7jQfHGes2LHF1l/AtyE0xQEXR3xG6Hhcv/nSZccIP299W6t1
7IhE03MxFcWuqoLvyTGgdKcFlDF0lMw/oElKElnTFQRSvrNMJZjoafhrzosCK+Ws
iFW1fPQGWKo2PLzRn8dY/Vq5oMrsWn19l5x9AgMBAAGjggH7MIIB9zAdBgNVHQ4E
FgQUO7GHeH3P2AFhngjzzHn2N6OEzkEwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL083R0hl
SDNQMkFGaG5nanp6SG4yTjZPRXprRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAXCAMA0GCSqGSIb3DQEBCwUAA4IBAQBaDozvSOx+WdJCbk0j
XT3Vowv3DHUdwnYORx5MlNWK4TbOqLJ7SKrrwoQ+DYPKVvwYt4mUXQ4VJingoxSG
/iK8ItUzWoXUmbpayVcscJHly/5KHzH1ZOX9aqIKq0CRCsY4k1Q50WSP9lIuuH4S
Y0aUnTIJuVb5wdyzewtlwz0tfsK+gi92GPn5ROx1mvHDHi+/RDhsdFOAgo2LoSi+
A1s/JAvYyGrRksNP0lTT5cNCdcna2MJCVCNoyztHmYK1BG2+nEe/Neay/WKKXMW4
IPssyAPEGGwlNsmjH5qSmolXItad2NGfPZBZo6nSBcVpvKvti6dp8bQf7Dx/JxEP
p+3X
-----END CERTIFICATE-----