Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/2xt72Uek6enenru6oxjpaEgp9zQ.roa
File:                     2xt72Uek6enenru6oxjpaEgp9zQ.roa (raw, json)
Hash identifier:          vHy8CSMM8ZUuozTz0T1FgUA7rVqIC0eSbn49vbaZSAA=
Subject key identifier:   DB:1B:7B:D9:47:A4:E9:E9:DE:9E:BB:BA:A3:18:E9:68:48:29:F7:34
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0D02
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2xt72Uek6enenru6oxjpaEgp9zQ.roa
Signing time:             Fri 01 Sep 2023 09:59:23 +0000
ROA not before:           Fri 01 Sep 2023 09:59:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     1659
IP address blocks:        2001:288::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3330 (0xd02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep  1 09:59:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DB1B7BD947A4E9E9DE9EBBBAA318E9684829F734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:de:7b:63:eb:9b:bf:87:90:d2:27:f1:1e:
                    d5:f2:d2:4e:f6:50:82:04:fb:78:6b:22:88:df:6c:
                    85:48:5a:b8:70:72:0b:96:a6:2c:59:1b:9c:07:f5:
                    b4:bd:90:02:cd:39:d9:69:d5:7b:44:c7:06:97:d7:
                    20:ed:4d:1c:b2:2c:aa:89:b4:ab:c3:b9:3e:d0:7d:
                    9e:15:82:1e:0a:f1:75:dc:98:7b:f2:f7:ee:88:bc:
                    98:32:4a:2f:f5:48:86:a9:3a:5f:23:ab:27:4a:7c:
                    8d:67:ca:b6:91:37:db:ee:84:4f:70:4b:51:7a:b9:
                    5f:96:8c:59:76:b8:cd:c0:15:e2:fa:65:8f:61:51:
                    e2:7f:3e:e8:7e:fc:c6:04:ce:0e:fa:fb:eb:d0:a8:
                    71:d1:bf:e8:9e:9c:0d:fa:55:fb:13:03:6e:da:ec:
                    60:98:4c:1a:46:0e:de:f3:de:a6:47:d6:e3:42:98:
                    f8:04:23:18:f3:73:e5:9f:70:1b:87:ab:29:9a:40:
                    a8:c6:25:ce:74:af:9b:8d:2a:69:67:17:b2:4a:27:
                    fc:85:f6:9e:ba:84:ca:5f:94:ab:61:97:79:33:51:
                    50:56:d4:8a:ca:4c:7f:58:5a:a4:a4:54:6a:38:cc:
                    fb:4f:4f:84:61:e3:00:93:8a:ae:5d:1f:5c:2f:fd:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:7B:D9:47:A4:E9:E9:DE:9E:BB:BA:A3:18:E9:68:48:29:F7:34
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2xt72Uek6enenru6oxjpaEgp9zQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:83:78:c4:a2:f3:d3:c4:d4:15:dd:0c:1a:3d:5b:3e:ee:f5:
         65:bb:6f:91:e6:62:41:fd:ad:66:dd:2b:48:77:11:27:b7:e3:
         9c:b7:6a:f2:13:de:b6:fa:08:fb:9f:a9:40:cc:a5:04:74:9d:
         57:a4:46:46:9a:0f:ec:0f:a9:8d:ac:f3:b8:21:0b:93:d5:17:
         6e:3c:a5:e9:c0:23:55:11:61:ac:1f:20:2a:e3:48:90:ad:db:
         fe:61:3d:0e:ca:3b:82:94:3d:a2:f0:ce:c2:28:12:9c:68:79:
         08:b6:6d:73:21:57:fb:6b:9e:1f:27:83:78:96:aa:22:f5:a7:
         4e:64:00:ed:f3:a4:c9:d2:09:26:cf:03:ef:75:17:6a:d2:be:
         af:f3:b8:69:23:72:8e:64:7b:b4:70:91:30:5b:8d:07:69:a2:
         cc:69:12:e3:b6:b9:f0:06:4f:b3:a0:9a:de:09:73:75:a3:53:
         00:8a:32:54:3f:78:da:5a:83:f3:7c:12:78:fd:4d:f1:03:a9:
         32:39:2e:1e:de:01:a2:42:39:0f:28:d8:18:b2:7e:91:b2:0c:
         e5:46:ad:44:a5:f5:bd:ae:29:3e:ef:0c:6e:42:0e:3f:2e:c2:
         db:b7:d2:fb:b8:ad:7e:d9:7d:cd:c2:24:b4:62:17:dc:7d:2b:
         ca:67:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----