Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
File:                     YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa (raw, json)
Hash identifier:          G45d3kNmq4/wb++PydlLZWguoJr2pqZi29IO9+cjz98=
Subject key identifier:   62:26:50:A7:0B:DC:EC:EF:D8:D6:B1:2B:53:0D:8A:C7:3C:C6:8C:FA
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       0886
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
Signing time:             Wed 18 Nov 2020 07:12:43 +0000
ROA not before:           Wed 18 Nov 2020 07:12:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        103.46.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 18 07:12:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=622650A70BDCECEFD8D6B12B530D8AC73CC68CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:73:95:20:2b:a8:75:5e:d0:92:05:8a:98:
                    3d:ba:f7:31:86:87:8e:d2:25:2b:d9:06:ae:69:32:
                    a2:b3:a7:0e:76:34:44:0c:dd:0b:f9:41:12:1e:dd:
                    98:f2:d6:15:8c:0b:29:5c:16:83:2c:7f:82:08:59:
                    98:1b:b9:96:48:c3:fe:50:d9:a9:4b:03:db:c2:92:
                    1f:d7:81:35:ae:d4:cb:1d:ba:97:49:69:f6:a3:d1:
                    ed:4c:96:66:a2:46:45:ac:d0:b5:7b:c7:f0:3d:16:
                    a9:0b:1d:a9:95:fe:5c:44:ab:4d:cb:96:fd:54:e3:
                    7e:ab:9d:7a:ef:49:ed:85:2c:93:c2:87:27:37:c2:
                    66:69:ec:91:4e:8e:cd:4a:9e:1b:1a:13:75:93:22:
                    09:fa:c2:f8:46:e7:05:1e:55:d4:2d:06:04:10:59:
                    a3:1c:b8:e8:5d:c2:17:ff:3a:ad:ba:15:eb:ae:89:
                    a2:d4:70:cf:e0:55:f2:6b:a6:10:7e:f3:b5:1f:04:
                    80:3b:e7:17:8b:1a:52:e8:ba:a8:0a:d2:e3:02:14:
                    13:2c:ac:93:b4:40:2a:b6:3f:12:ea:7c:d7:70:12:
                    60:bc:93:dc:2b:35:87:eb:e7:bf:ba:df:90:c8:5d:
                    d7:99:1b:f3:5f:3b:5c:11:b2:91:db:9d:67:8d:85:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:50:A7:0B:DC:EC:EF:D8:D6:B1:2B:53:0D:8A:C7:3C:C6:8C:FA
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:66:84:9b:d0:67:d8:8b:f8:89:f6:4f:04:95:04:6c:25:42:
         d1:b8:73:d0:66:7c:a9:97:d7:f1:2d:ae:4c:3c:89:89:23:e5:
         fd:72:02:e6:33:9f:ef:2a:05:4b:39:35:ce:af:c9:ee:13:f3:
         eb:3e:a4:76:65:61:03:bb:78:09:c3:f8:bc:46:94:58:08:de:
         76:6f:9f:4b:cb:01:20:98:0f:57:d1:95:67:9f:4c:16:21:ee:
         38:ac:3a:35:c5:81:90:d4:9c:ae:10:ef:f9:fd:c9:dd:4e:d3:
         ba:81:fd:bc:35:90:00:e4:a9:a2:67:8a:57:1b:4a:44:61:46:
         90:f8:72:70:75:6f:bd:53:69:9a:8a:02:98:31:fc:71:18:58:
         68:76:59:62:2e:3a:63:77:15:f9:b4:25:2b:d9:3e:65:6a:e6:
         b5:e7:d1:f4:2c:7f:0d:ed:ba:73:06:e4:33:94:1e:ac:cd:c5:
         b8:79:20:5b:b7:32:c1:5f:2b:17:97:48:65:47:54:d3:5b:a3:
         4b:d7:97:95:a1:7e:1e:22:58:17:75:ca:32:5c:2f:89:eb:a6:
         cc:5a:ec:16:f9:9c:50:12:44:dc:d7:e8:16:9c:36:86:9a:60:
         82:78:f1:b9:37:79:81:fe:b0:75:96:98:6a:4f:f4:6a:90:a7:
         ef:df:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----