Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/Bz0P_gN2_sDHfHmyARIP0EN2_lA.roa
File:                     Bz0P_gN2_sDHfHmyARIP0EN2_lA.roa (raw, json)
Hash identifier:          EQyJVegqrTuw9gXp5Dt5TY42JdBAVvASNraMUe3lHp4=
Subject key identifier:   07:3D:0F:FE:03:76:FE:C0:C7:7C:79:B2:01:12:0F:D0:43:76:FE:50
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       088E
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/Bz0P_gN2_sDHfHmyARIP0EN2_lA.roa
Signing time:             Wed 18 Nov 2020 07:15:39 +0000
ROA not before:           Wed 18 Nov 2020 07:15:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        43.227.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 18 07:15:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=073D0FFE0376FEC0C77C79B201120FD04376FE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:a7:74:39:1c:23:96:73:3d:00:5f:9d:b4:
                    d6:74:30:01:9d:89:6a:5f:a8:9e:de:db:c7:09:e9:
                    f4:01:c5:47:4f:5f:f4:40:df:d2:5f:b6:54:3d:33:
                    29:0f:12:15:bd:4d:b9:93:f4:5e:2a:3c:6e:d4:ae:
                    0c:07:03:ea:d9:ef:09:e6:10:bd:3a:3f:a2:dd:37:
                    be:08:d4:84:89:8d:0e:38:e0:4a:19:9c:ed:ae:29:
                    ba:68:c6:57:1e:76:23:06:70:fa:33:58:4d:79:df:
                    58:91:04:57:4d:d2:2a:97:f4:39:24:49:97:59:18:
                    6c:fe:c1:3b:66:50:62:d5:0a:55:9c:b6:ec:f3:d7:
                    58:ea:1d:b6:39:22:4e:68:57:2e:54:c9:51:1c:bb:
                    7b:eb:86:ab:25:7c:bb:cb:7b:20:d9:98:c9:10:d6:
                    52:23:b7:8b:68:cd:06:40:27:d4:76:dc:b0:99:21:
                    47:dc:63:5b:6e:ec:e9:48:9e:21:96:54:d2:a3:90:
                    49:59:09:e8:19:17:76:b1:a4:01:c2:a7:dd:6f:57:
                    b8:e1:65:e0:9f:1c:84:d3:80:55:3c:0a:52:96:5f:
                    f9:09:ef:ec:4d:eb:42:cd:2e:30:07:02:8b:64:da:
                    97:46:8c:82:9d:62:ae:40:c9:2e:c1:87:c5:ca:b5:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3D:0F:FE:03:76:FE:C0:C7:7C:79:B2:01:12:0F:D0:43:76:FE:50
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/Bz0P_gN2_sDHfHmyARIP0EN2_lA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:57:19:f1:0d:d3:eb:20:0a:b8:39:55:29:1f:dc:ab:00:
         a5:15:62:d1:3e:95:b6:16:fe:10:4c:6a:ae:f1:3f:48:e0:5d:
         8b:e8:47:40:0c:b9:57:0b:00:30:76:ec:c2:0c:ef:80:d2:0c:
         12:e2:de:14:2e:7b:e8:e4:04:94:d8:b4:56:8a:34:b2:37:41:
         84:c8:95:90:c5:5e:81:e5:f5:f0:14:c1:7f:21:be:78:7e:a8:
         d0:94:8e:86:32:0a:ff:c7:3f:59:be:91:d8:14:61:b5:e9:18:
         6b:89:d8:4e:28:00:e5:1a:fa:3d:a3:08:df:98:da:bd:b5:09:
         5e:f8:cf:95:6f:21:4f:c6:96:45:06:5b:43:c2:fe:b2:b7:71:
         12:1b:4e:39:e1:84:ff:46:ef:15:79:ac:e8:8f:20:9d:4a:f4:
         48:69:00:c0:2e:81:a9:bc:e7:b5:20:19:42:b4:b2:00:f3:16:
         ae:9b:ab:92:02:f2:c1:98:e6:8c:d2:8e:eb:cd:24:0f:3b:80:
         11:69:d1:94:05:73:11:91:d4:25:71:9d:f1:85:41:07:9f:9f:
         d9:4b:ef:cd:ca:7d:a0:49:ad:2c:16:d9:59:e5:1f:d6:c6:f6:
         98:44:cb:bb:ad:10:6d:99:c8:76:68:63:5b:35:89:8b:96:e7:
         71:83:ed:e4
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUZF
MjZBRTVFMERBNTZFQzQ5RUM5OTg2QjlDODk0RDVCODk4QTE1MzAeFw0yMDExMTgw
NzE1MzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA3M0QwRkZFMDM3NkZF
QzBDNzdDNzlCMjAxMTIwRkQwNDM3NkZFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhyKd0ORwjlnM9AF+dtNZ0MAGdiWpfqJ7e28cJ6fQBxUdPX/RA
39JftlQ9MykPEhW9TbmT9F4qPG7UrgwHA+rZ7wnmEL06P6LdN74I1ISJjQ444EoZ
nO2uKbpoxlcediMGcPozWE1531iRBFdN0iqX9DkkSZdZGGz+wTtmUGLVClWctuzz
11jqHbY5Ik5oVy5UyVEcu3vrhqslfLvLeyDZmMkQ1lIjt4tozQZAJ9R23LCZIUfc
Y1tu7OlIniGWVNKjkElZCegZF3axpAHCp91vV7jhZeCfHITTgFU8ClKWX/kJ7+xN
60LNLjAHAotk2pdGjIKdYq5AyS7Bh8XKtTgzAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUBz0P/gN2/sDHfHmyARIP0EN2/lAwHwYDVR0jBBgwFoAUn+Jq5eDaVuxJ7JmG
uciU1biYoVMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVE5FVC9u
LUpxNWVEYVZ1eEo3Sm1HdWNpVTFiaVlvVk0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L24tSnE1ZURhVnV4SjdKbUd1Y2lVMWJpWW9WTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RORVQvQnowUF9nTjJfc0RIZkhteUFSSVAw
RU4yX2xBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASvjGDAN
BgkqhkiG9w0BAQsFAAOCAQEAHFxXGfEN0+sgCrg5VSkf3KsApRVi0T6Vthb+EExq
rvE/SOBdi+hHQAy5VwsAMHbswgzvgNIMEuLeFC576OQElNi0Voo0sjdBhMiVkMVe
geX18BTBfyG+eH6o0JSOhjIK/8c/Wb6R2BRhtekYa4nYTigA5Rr6PaMI35javbUJ
XvjPlW8hT8aWRQZbQ8L+srdxEhtOOeGE/0bvFXms6I8gnUr0SGkAwC6BqbzntSAZ
QrSyAPMWrpurkgLywZjmjNKO680kDzuAEWnRlAVzEZHUJXGd8YVBB5+f2Uvvzcp9
oEmtLBbZWeUf1sb2mETLu60QbZnIdmhjWzWJi5bncYPt5A==
-----END CERTIFICATE-----