Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/fr2cY5d7iqR2iBsbzBnT_sD16vY.roa
File:                     fr2cY5d7iqR2iBsbzBnT_sD16vY.roa (raw, json)
Hash identifier:          B/Gzh3AcyqmMMyr4BDUZRuhNaQYDzfRlJW6G93/DNbA=
Subject key identifier:   7E:BD:9C:63:97:7B:8A:A4:76:88:1B:1B:CC:19:D3:FE:C0:F5:EA:F6
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0C6B
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/fr2cY5d7iqR2iBsbzBnT_sD16vY.roa
Signing time:             Mon 17 Jun 2024 08:57:31 +0000
ROA not before:           Mon 17 Jun 2024 08:57:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        61.58.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3179 (0xc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Jun 17 08:57:31 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7EBD9C63977B8AA476881B1BCC19D3FEC0F5EAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:95:9e:fd:71:74:81:05:7d:85:2d:5a:fd:
                    0c:62:de:e7:24:c2:92:0b:7b:ef:4c:53:2d:fe:4c:
                    c0:f3:f9:d2:fa:6c:87:82:65:e2:0d:2c:8d:25:aa:
                    ae:6a:3c:83:ef:9d:36:0a:33:1a:91:e4:b6:28:e7:
                    68:eb:d9:80:4a:8d:71:71:3e:e1:c8:31:91:56:57:
                    da:d5:f2:a3:21:19:f1:ed:e3:93:10:bc:58:0f:41:
                    d0:1b:31:07:5b:ad:0d:cb:d1:22:c5:aa:71:11:44:
                    71:90:1f:48:0f:53:86:f7:06:82:b0:18:7f:42:99:
                    30:a1:c1:df:e2:7c:62:3c:0f:df:77:ee:d2:1e:06:
                    39:6a:bf:19:37:25:5e:1b:78:8b:c8:0b:a8:f7:32:
                    71:da:34:c7:52:69:02:0f:ac:eb:d9:df:bd:f6:47:
                    00:ce:b1:bd:2f:70:b8:a3:5b:96:b1:f7:d8:e2:dd:
                    d7:0c:dd:3f:56:d1:0c:40:cf:76:5d:bb:bd:53:4f:
                    f3:44:ce:41:1c:ca:56:97:b1:07:93:41:b6:2a:ff:
                    67:9a:95:4f:0e:9b:af:12:a0:b9:e4:bb:58:b3:42:
                    bd:a5:9e:3a:4f:fa:40:82:5a:6e:e9:44:ab:45:1d:
                    34:d6:28:59:19:4a:44:2f:2d:86:29:52:d4:a3:cf:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BD:9C:63:97:7B:8A:A4:76:88:1B:1B:CC:19:D3:FE:C0:F5:EA:F6
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/fr2cY5d7iqR2iBsbzBnT_sD16vY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:aa:53:a1:2d:38:1f:2e:10:89:06:84:74:d9:32:70:a9:
         eb:21:4a:97:37:5f:6c:1c:3b:fc:cf:ec:35:c0:29:1a:e2:9e:
         86:c8:d5:b3:6f:ed:c7:fa:55:2a:e7:1f:0e:d7:6e:35:ed:71:
         fa:10:06:09:cb:98:bb:f4:c1:14:ff:3e:a1:6f:73:3b:ca:aa:
         cf:a3:15:77:3e:a1:32:cc:bf:2b:94:00:26:97:9c:e8:d1:04:
         dc:eb:36:43:7b:98:0e:49:ea:e6:5a:2d:ed:43:d7:51:eb:e0:
         fe:88:57:c0:c7:0b:c2:4a:55:ad:1e:c8:cc:33:e5:2b:50:cd:
         25:4c:38:58:ee:5c:d8:d5:61:8b:b2:bb:5d:71:9a:35:70:aa:
         6a:94:48:98:bd:96:d3:c6:93:54:9d:3e:8b:af:82:80:34:48:
         d4:33:7a:8c:5e:e1:04:56:15:64:0c:79:9c:7c:48:15:8f:87:
         e1:31:30:9b:0b:a3:7a:a0:a3:b3:fb:32:d7:77:e1:fd:de:55:
         43:9a:e7:37:6a:ef:91:d5:67:e0:8a:4d:e4:11:b4:cc:2f:6d:
         0a:35:d3:2e:51:ab:4e:9a:d3:c2:53:3e:28:43:15:9e:c0:b8:
         aa:13:79:30:71:a7:8e:42:af:64:14:98:14:9b:f7:1b:f6:f7:
         7c:d9:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----