Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/ErX2DEs16hsoctSfp5sHKThGQyA.roa
File:                     ErX2DEs16hsoctSfp5sHKThGQyA.roa (raw, json)
Hash identifier:          CkxRvkq64kS3iEDrwEQt7ZzsLG0agm28ZEzJTtxxwhk=
Subject key identifier:   12:B5:F6:0C:4B:35:EA:1B:28:72:D4:9F:A7:9B:07:29:38:46:43:20
Certificate issuer:       /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial:       F3
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/ErX2DEs16hsoctSfp5sHKThGQyA.roa
Signing time:             Tue 21 Nov 2023 15:31:03 +0000
ROA not before:           Tue 21 Nov 2023 15:31:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        2400:c9a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
        Validity
            Not Before: Nov 21 15:31:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=12B5F60C4B35EA1B2872D49FA79B072938464320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:a2:f3:07:d2:9d:c5:d0:33:5d:59:69:bf:
                    43:cb:94:f7:e2:96:32:7d:6b:66:a6:ad:b5:18:ca:
                    50:4c:8b:f7:07:99:81:05:ae:51:a6:05:7f:a7:3e:
                    f4:a0:0b:2f:c3:67:03:ed:d9:ab:22:76:ad:9a:60:
                    ae:06:dc:8b:8f:33:c7:7b:b6:25:ca:3a:3f:c5:e7:
                    b0:63:de:54:30:0c:61:dc:85:39:4a:ed:48:29:8b:
                    2a:4a:e4:db:50:49:31:46:52:bd:60:99:30:c6:91:
                    b3:c6:e8:26:96:69:ee:f9:d1:ae:5f:09:e2:fe:32:
                    65:f2:38:94:26:f2:93:df:3f:e4:de:1f:7f:3b:00:
                    94:94:fe:5f:9f:f3:2b:10:84:75:e6:c7:21:de:fc:
                    9c:62:6d:77:cd:f5:ac:36:ea:41:f4:13:0a:46:17:
                    b0:e7:c9:ad:e5:a9:b6:bf:e1:23:1c:90:b2:2e:9f:
                    86:cc:53:dd:02:4e:b4:c7:53:bb:56:45:9c:56:52:
                    31:a5:91:5b:38:98:6e:07:ab:c6:f0:8a:e8:05:89:
                    54:f0:72:5e:2c:32:86:71:e5:5e:32:83:86:1a:85:
                    5f:46:69:2e:ff:b4:e4:bf:34:3e:00:3e:c8:76:1f:
                    76:c0:16:57:08:12:4d:8f:31:76:d6:50:09:f7:82:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B5:F6:0C:4B:35:EA:1B:28:72:D4:9F:A7:9B:07:29:38:46:43:20
            X509v3 Authority Key Identifier:
                keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/ErX2DEs16hsoctSfp5sHKThGQyA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:8e:48:d6:8b:a3:e6:49:7a:c6:14:f7:ce:c6:3d:f3:ef:
         f5:0c:29:d4:97:c5:26:d7:da:07:00:87:54:12:c9:54:91:40:
         05:cb:28:a1:cf:4f:c1:c7:42:3b:3c:f9:f0:d9:37:fe:13:17:
         76:95:05:d6:e2:1b:e1:60:6f:f0:ee:80:30:05:aa:9d:3f:81:
         b4:ec:90:38:42:7c:3b:50:0f:13:36:f4:02:01:3b:41:ba:8b:
         dd:5b:b8:93:61:5f:4e:7c:dd:2d:7b:5b:13:a9:04:98:dd:36:
         28:60:17:b7:1b:12:78:0c:c2:93:df:c5:aa:91:56:31:92:ab:
         88:16:4b:66:c0:07:ee:6d:39:5b:67:26:b3:b0:21:d4:8e:e9:
         a2:8b:6a:c4:4a:ce:52:a4:9f:eb:cf:74:fc:6f:61:28:64:20:
         9b:e0:bf:cb:87:ae:bb:5e:11:8c:8b:b3:ee:57:7d:23:15:ae:
         74:f6:c1:73:19:3c:48:1b:f6:71:75:40:0e:01:27:2a:c6:7d:
         15:20:a9:87:a7:91:8d:e7:f0:13:14:64:ab:b2:d2:08:ae:4e:
         46:97:c7:17:90:1d:17:28:ec:ea:9e:78:27:91:c2:6c:69:7c:
         a1:ee:d1:72:a8:55:b7:a3:73:2d:b8:84:b5:e4:0a:06:91:f0:
         14:e4:73:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----