Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qjM2PXNWAej-8PtX5Y5AdT1b-hU.roa
File:                     qjM2PXNWAej-8PtX5Y5AdT1b-hU.roa (raw, json)
Hash identifier:          Eh8EThXbkBR10/QF8fiPC/pe39JnPVPEjMAVCan1usg=
Subject key identifier:   AA:33:36:3D:73:56:01:E8:FE:F0:FB:57:E5:8E:40:75:3D:5B:FA:15
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0BA3
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qjM2PXNWAej-8PtX5Y5AdT1b-hU.roa
Signing time:             Fri 01 Sep 2023 09:59:00 +0000
ROA not before:           Fri 01 Sep 2023 09:59:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        2402:7500:f9ff::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:59:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AA33363D735601E8FEF0FB57E58E40753D5BFA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:35:c9:76:9d:27:23:f2:d0:4a:fe:40:43:
                    d8:6d:05:17:cc:1c:e1:e2:18:bf:06:8f:81:36:cd:
                    b8:fd:80:b9:54:a4:6f:5e:9a:b0:ae:63:a9:6a:6f:
                    b0:3a:d1:b7:ac:3d:6b:f4:66:8f:7c:26:41:17:26:
                    73:09:cd:56:14:ca:8e:2a:13:b7:69:6b:af:30:f7:
                    f6:ee:49:db:fa:ad:45:1e:5b:fa:b7:12:7e:a0:22:
                    c2:89:96:39:5b:2c:40:f4:e8:57:21:5b:a3:1b:0f:
                    62:e9:64:5c:4e:be:5e:fd:fe:54:7e:5a:5c:0e:b4:
                    65:b8:4c:a1:56:8a:73:26:88:70:cf:94:29:69:4d:
                    03:32:3e:ae:d1:79:3b:61:eb:e3:6d:93:4a:23:9f:
                    41:99:16:0c:90:5f:ad:ef:3f:f9:40:f5:ea:b1:e8:
                    e2:58:e8:b0:5e:46:f0:78:23:d3:53:0d:ca:34:1f:
                    79:aa:f5:e0:b1:e7:00:4b:71:b5:3c:61:f3:34:16:
                    58:ca:62:7a:b3:9c:75:71:4b:46:f1:bd:12:58:d5:
                    7a:4b:42:dd:b9:83:c7:f6:bc:8f:9f:ec:30:de:49:
                    03:79:87:73:2f:4c:1d:8c:04:e8:49:7c:48:30:d8:
                    a9:d9:9c:8d:8a:47:2d:f8:af:dc:27:d3:ee:17:36:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:36:3D:73:56:01:E8:FE:F0:FB:57:E5:8E:40:75:3D:5B:FA:15
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qjM2PXNWAej-8PtX5Y5AdT1b-hU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:f9ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:39:a2:60:0b:82:4b:d6:3d:54:d9:1f:f7:b3:d8:0a:d5:46:
         03:dd:0f:ef:8a:f1:f5:4d:2d:44:e8:6f:1b:5b:49:ba:7e:25:
         8a:85:d1:0c:20:62:d6:83:ff:a6:f4:5c:34:b2:d8:dc:28:36:
         14:45:8b:f6:89:78:f5:35:17:b7:f8:b9:77:59:b1:a7:61:75:
         7d:14:eb:ff:84:59:61:1b:a0:7c:f2:5c:fe:db:8a:21:d6:06:
         6f:88:d7:50:31:ff:53:f8:92:ba:ca:f6:f9:36:e5:91:17:ad:
         cf:50:24:e8:10:7e:a4:76:3a:c6:b7:53:6b:66:01:94:55:c4:
         3b:c1:0f:11:23:58:ff:0f:ac:95:f3:5d:54:aa:b8:1f:a1:de:
         77:d0:9d:fa:03:13:11:fc:d2:58:ab:79:89:6c:84:62:c4:55:
         a7:de:3c:8d:be:e7:8d:6c:ac:f9:5d:05:a1:67:ff:29:ea:11:
         32:40:8f:e4:88:6e:26:66:9a:a0:87:da:07:63:3b:88:76:31:
         16:14:00:50:69:5d:07:80:7b:5f:6d:21:28:6c:29:59:85:dc:
         ed:ce:8f:c7:6c:2c:3e:f2:03:15:f2:d0:3c:c7:2b:db:c3:00:
         32:73:af:28:1f:3e:83:d2:13:97:09:5b:ea:35:f5:12:ce:5d:
         9b:f4:81:90
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzA5MDEw
OTU5MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBMzMzNjNENzM1NjAx
RThGRUYwRkI1N0U1OEU0MDc1M0Q1QkZBMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8DDXJdp0nI/LQSv5AQ9htBRfMHOHiGL8Gj4E2zbj9gLlUpG9e
mrCuY6lqb7A60besPWv0Zo98JkEXJnMJzVYUyo4qE7dpa68w9/buSdv6rUUeW/q3
En6gIsKJljlbLED06FchW6MbD2LpZFxOvl79/lR+WlwOtGW4TKFWinMmiHDPlClp
TQMyPq7ReTth6+Ntk0ojn0GZFgyQX63vP/lA9eqx6OJY6LBeRvB4I9NTDco0H3mq
9eCx5wBLcbU8YfM0FljKYnqznHVxS0bxvRJY1XpLQt25g8f2vI+f7DDeSQN5h3Mv
TB2MBOhJfEgw2KnZnI2KRy34r9wn0+4XNr3rAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUqjM2PXNWAej+8PtX5Y5AdT1b+hUwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3FqTTJQ
WE5XQWVqLThQdFg1WTVBZFQxYi1oVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAkAnUA+f8wDQYJKoZIhvcNAQELBQADggEBAGo5omALgkvWPVTZ
H/ez2ArVRgPdD++K8fVNLUTobxtbSbp+JYqF0QwgYtaD/6b0XDSy2NwoNhRFi/aJ
ePU1F7f4uXdZsadhdX0U6/+EWWEboHzyXP7biiHWBm+I11Ax/1P4krrK9vk25ZEX
rc9QJOgQfqR2Osa3U2tmAZRVxDvBDxEjWP8PrJXzXVSquB+h3nfQnfoDExH80lir
eYlshGLEVafePI2+541srPldBaFn/ynqETJAj+SIbiZmmqCH2gdjO4h2MRYUAFBp
XQeAe19tIShsKVmF3O3Oj8dsLD7yAxXy0DzHK9vDADJzrygfPoPSE5cJW+o19RLO
XZv0gZA=
-----END CERTIFICATE-----