Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
File:                     IvcIAvJSjvyzmgnNEuyzsmayOzI.roa (raw, json)
Hash identifier:          oE1Htle9TtrAJ+9JYkyw1UJERCjYhVQpzSwFZHSYmnA=
Subject key identifier:   22:F7:08:02:F2:52:8E:FC:B3:9A:09:CD:12:EC:B3:B2:66:B2:3B:32
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       0890
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
Signing time:             Wed 18 Nov 2020 07:16:10 +0000
ROA not before:           Wed 18 Nov 2020 07:16:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        43.227.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 18 07:16:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=22F70802F2528EFCB39A09CD12ECB3B266B23B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:f3:4b:8e:ed:4e:ce:55:a0:4d:70:dd:c7:
                    ae:b7:84:77:1f:b4:62:67:6c:85:f9:50:2d:e6:08:
                    0f:3b:bf:23:5a:04:55:e6:18:6f:39:94:3e:d5:2c:
                    9d:d4:63:47:0a:bc:f7:1b:bf:3b:71:41:e7:53:2f:
                    13:15:d8:22:41:10:b4:63:74:c3:11:02:e9:0a:91:
                    02:24:59:93:3a:49:89:30:2e:8c:49:da:d5:e0:e6:
                    83:03:b1:d1:b6:52:f0:f6:8d:41:67:ac:89:c2:36:
                    09:af:52:13:14:81:f0:6c:10:fe:50:dc:4b:aa:8e:
                    1c:c1:fa:63:a0:fa:aa:72:20:8d:35:0d:5a:72:f3:
                    a8:fc:96:ba:fd:24:01:99:94:7b:d6:f6:ce:60:41:
                    6a:66:02:fd:42:28:8c:4d:55:e9:a4:6a:a9:ca:40:
                    66:fb:3e:43:78:13:65:c6:8e:90:66:08:c9:7b:9b:
                    fc:4a:d9:c3:e4:b6:45:f8:29:a6:43:b8:89:04:30:
                    9d:70:70:98:39:ac:3b:12:b6:89:be:44:9f:7a:b9:
                    c2:f0:f1:e2:66:56:1c:14:b8:06:c2:e6:92:af:32:
                    f7:1f:bc:46:68:41:60:c3:99:13:af:d5:65:73:9d:
                    12:34:db:61:94:88:4a:52:c8:62:90:e2:18:19:4b:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:08:02:F2:52:8E:FC:B3:9A:09:CD:12:EC:B3:B2:66:B2:3B:32
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:02:9b:0f:e3:6b:88:11:88:d1:1f:c3:a5:f8:a5:74:dd:ae:
         c0:e2:da:f3:58:45:bd:01:b8:c9:51:a8:eb:be:5a:4c:e9:fa:
         06:39:fc:9d:48:de:f6:f3:a9:ef:4a:a5:54:41:f0:35:37:b7:
         45:f0:30:01:ad:78:8e:f8:9a:3f:d9:18:7b:0b:68:32:c8:67:
         14:75:40:71:d0:45:7d:a4:a4:2a:05:71:5c:38:06:9e:4d:ea:
         a5:69:e1:de:62:4c:f8:84:44:6a:e3:f6:ae:20:19:ed:cd:79:
         1b:f1:7c:81:9c:5d:73:7f:ef:ab:88:a7:83:34:1a:4f:67:70:
         5b:fc:33:0e:e6:47:95:d4:9e:a4:c5:1e:f5:92:8a:e9:d3:17:
         5d:b8:b1:8e:20:86:1f:ae:73:f1:e4:24:6f:9f:3a:77:24:bf:
         45:a4:dd:f0:3d:67:14:5e:33:39:3e:82:de:70:43:5b:78:0c:
         2d:7d:36:81:8c:6e:97:f4:c7:d2:16:84:58:ac:2c:93:33:f6:
         13:b0:a3:c1:f0:ad:8f:c9:f6:e8:5d:a1:b0:8b:14:cb:a2:f9:
         58:2f:25:07:a6:9f:63:1e:9e:2d:fc:3b:48:2d:c3:cc:7b:5b:
         a2:0f:eb:20:2f:1a:21:2c:3e:e9:6c:4e:5c:ec:6a:b2:12:ba:
         e5:65:05:bc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUZF
MjZBRTVFMERBNTZFQzQ5RUM5OTg2QjlDODk0RDVCODk4QTE1MzAeFw0yMDExMTgw
NzE2MTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDIyRjcwODAyRjI1MjhF
RkNCMzlBMDlDRDEyRUNCM0IyNjZCMjNCMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVMPNLju1OzlWgTXDdx663hHcftGJnbIX5UC3mCA87vyNaBFXm
GG85lD7VLJ3UY0cKvPcbvztxQedTLxMV2CJBELRjdMMRAukKkQIkWZM6SYkwLoxJ
2tXg5oMDsdG2UvD2jUFnrInCNgmvUhMUgfBsEP5Q3EuqjhzB+mOg+qpyII01DVpy
86j8lrr9JAGZlHvW9s5gQWpmAv1CKIxNVemkaqnKQGb7PkN4E2XGjpBmCMl7m/xK
2cPktkX4KaZDuIkEMJ1wcJg5rDsStom+RJ96ucLw8eJmVhwUuAbC5pKvMvcfvEZo
QWDDmROv1WVznRI022GUiEpSyGKQ4hgZSx4FAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUIvcIAvJSjvyzmgnNEuyzsmayOzIwHwYDVR0jBBgwFoAUn+Jq5eDaVuxJ7JmG
uciU1biYoVMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVE5FVC9u
LUpxNWVEYVZ1eEo3Sm1HdWNpVTFiaVlvVk0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L24tSnE1ZURhVnV4SjdKbUd1Y2lVMWJpWW9WTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RORVQvSXZjSUF2SlNqdnl6bWduTkV1eXpz
bWF5T3pJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASvjGjAN
BgkqhkiG9w0BAQsFAAOCAQEAlQKbD+NriBGI0R/DpfildN2uwOLa81hFvQG4yVGo
675aTOn6Bjn8nUje9vOp70qlVEHwNTe3RfAwAa14jviaP9kYewtoMshnFHVAcdBF
faSkKgVxXDgGnk3qpWnh3mJM+IREauP2riAZ7c15G/F8gZxdc3/vq4ingzQaT2dw
W/wzDuZHldSepMUe9ZKK6dMXXbixjiCGH65z8eQkb586dyS/RaTd8D1nFF4zOT6C
3nBDW3gMLX02gYxul/TH0haEWKwskzP2E7CjwfCtj8n26F2hsIsUy6L5WC8lB6af
Yx6eLfw7SC3DzHtbog/rIC8aISw+6WxOXOxqshK65WUFvA==
-----END CERTIFICATE-----