Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa
File:                     cEOaZaAsp8owATkrnHNjaB05xI4.roa (raw, json)
Hash identifier:          zS27O251jHnujNDPm6AgBGkw0Gqux9HBZHklx1lMHVQ=
Subject key identifier:   70:43:9A:65:A0:2C:A7:CA:30:01:39:2B:9C:73:63:68:1D:39:C4:8E
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0B81
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa
Signing time:             Fri 01 Sep 2023 09:59:52 +0000
ROA not before:           Fri 01 Sep 2023 09:59:52 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131596
IP address blocks:        2405:9200::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2945 (0xb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep  1 09:59:52 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=70439A65A02CA7CA3001392B9C7363681D39C48E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:87:c2:53:87:1e:75:12:f4:b8:69:15:2b:
                    8b:13:25:eb:59:72:42:e6:8d:9a:0e:d1:dd:7b:0d:
                    b2:e3:b1:1d:54:b6:8f:d3:bd:b5:e5:d7:a3:a2:66:
                    ae:f1:e2:86:e0:07:62:d5:e0:56:d8:bb:6b:4e:6e:
                    15:e9:a1:f6:68:5c:4c:18:a7:20:ab:ab:f9:9f:51:
                    20:68:a7:75:be:c3:95:a2:7c:33:50:32:5f:7a:8a:
                    c4:53:57:7e:7e:3f:b5:06:a0:1f:cc:47:1a:46:30:
                    a0:17:78:8d:42:1b:c7:b4:87:e5:bb:76:97:56:77:
                    ff:6b:e5:0c:20:3a:05:de:15:c3:93:78:38:8d:ce:
                    e1:14:08:57:98:21:3e:b2:6e:52:88:d8:34:55:b1:
                    86:34:1e:13:91:9d:96:71:74:24:0b:0b:3b:23:ee:
                    de:ec:93:1b:30:dd:26:31:c2:54:88:1c:9e:76:8a:
                    e4:7d:9c:bc:dd:ca:3e:76:f6:04:f8:d8:b5:14:36:
                    95:5e:5a:58:22:5b:5e:e1:18:b5:30:62:ac:35:a6:
                    1e:41:df:92:f8:91:7a:88:b1:fe:65:08:7b:a8:1a:
                    2d:6b:cf:91:16:3c:2e:18:a6:a8:61:13:e0:59:7f:
                    99:86:35:2f:cb:f6:ed:c9:c3:15:e8:cb:8b:c6:35:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:9A:65:A0:2C:A7:CA:30:01:39:2B:9C:73:63:68:1D:39:C4:8E
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:4f:61:dd:ba:7c:17:7e:1c:77:f8:bb:a8:f8:ba:31:2f:
         0b:e4:27:b4:49:0c:56:2a:a3:50:e2:21:69:d0:c9:64:a3:89:
         c0:b6:8f:62:40:58:97:f0:59:2a:03:dd:d4:0c:d1:ac:6a:64:
         cf:0e:78:48:76:7c:e8:6f:30:41:ef:05:98:2c:c8:95:94:26:
         5d:88:0e:af:d9:83:0a:a4:ca:2b:c3:85:c3:a7:ca:39:ec:75:
         53:d7:7f:74:b4:e2:7e:bb:5e:24:b3:59:4d:22:55:dd:97:9a:
         b7:b9:9a:83:26:74:f3:44:56:a8:21:f0:55:d9:ce:5d:31:98:
         14:47:00:f3:3a:12:6b:3a:0f:5a:e0:c4:ac:61:b3:24:dc:25:
         95:78:d4:52:75:87:1b:2f:10:9f:a9:33:c5:47:21:ea:3e:5e:
         fb:d0:61:f4:ac:22:52:f3:98:b8:c7:1c:04:c3:b0:8d:75:9f:
         e4:e6:19:6c:1a:7c:c6:2a:76:3f:d4:03:09:8f:44:d0:30:77:
         55:0c:18:18:3c:21:8f:77:e0:e6:7a:79:d7:e4:fe:c1:c8:74:
         d9:df:0c:89:95:73:ad:f7:ba:e3:cd:f1:d0:d3:f1:00:d1:62:
         14:42:21:19:72:7b:ee:bb:2f:73:22:b3:82:47:f8:20:a6:8a:
         bb:ce:9f:f2
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMzA5MDEw
OTU5NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwNDM5QTY1QTAyQ0E3
Q0EzMDAxMzkyQjlDNzM2MzY4MUQzOUM0OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB3IfCU4cedRL0uGkVK4sTJetZckLmjZoO0d17DbLjsR1Uto/T
vbXl16OiZq7x4obgB2LV4FbYu2tObhXpofZoXEwYpyCrq/mfUSBop3W+w5WifDNQ
Ml96isRTV35+P7UGoB/MRxpGMKAXeI1CG8e0h+W7dpdWd/9r5QwgOgXeFcOTeDiN
zuEUCFeYIT6yblKI2DRVsYY0HhORnZZxdCQLCzsj7t7skxsw3SYxwlSIHJ52iuR9
nLzdyj529gT42LUUNpVeWlgiW17hGLUwYqw1ph5B35L4kXqIsf5lCHuoGi1rz5EW
PC4YpqhhE+BZf5mGNS/L9u3JwxXoy4vGNT99AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUcEOaZaAsp8owATkrnHNjaB05xI4wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9jRU9hWmFBc3A4b3dBVGtybkhO
amFCMDV4STQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAWS
ADANBgkqhkiG9w0BAQsFAAOCAQEACl9PYd26fBd+HHf4u6j4ujEvC+QntEkMViqj
UOIhadDJZKOJwLaPYkBYl/BZKgPd1AzRrGpkzw54SHZ86G8wQe8FmCzIlZQmXYgO
r9mDCqTKK8OFw6fKOex1U9d/dLTifrteJLNZTSJV3Zeat7magyZ080RWqCHwVdnO
XTGYFEcA8zoSazoPWuDErGGzJNwllXjUUnWHGy8Qn6kzxUch6j5e+9Bh9KwiUvOY
uMccBMOwjXWf5OYZbBp8xip2P9QDCY9E0DB3VQwYGDwhj3fg5np51+T+wch02d8M
iZVzrfe6483x0NPxANFiFEIhGXJ77rsvcyKzgkf4IKaKu86f8g==
-----END CERTIFICATE-----