Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
File:                     kCITHkj--XIbpqdDLSYHheozUgA.roa (raw, json)
Hash identifier:          RC+UIlmGJrJS7veX40TkGlWerqZrmvKq1fK8VrSqNdA=
Subject key identifier:   90:22:13:1E:48:FE:F9:72:1B:A6:A7:43:2D:26:07:85:EA:33:52:00
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       0888
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
Signing time:             Wed 18 Nov 2020 07:13:09 +0000
ROA not before:           Wed 18 Nov 2020 07:13:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        103.46.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 18 07:13:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9022131E48FEF9721BA6A7432D260785EA335200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:0d:0b:9f:89:19:1b:16:99:e6:4e:7b:9c:
                    29:30:bd:59:2f:be:ba:29:c8:d0:ce:56:6f:80:8c:
                    f4:d9:23:4f:e9:ea:63:4a:11:77:78:05:93:64:22:
                    d5:67:20:e4:d3:f8:8d:b9:65:af:e4:e4:25:aa:01:
                    6a:c3:74:d3:61:44:42:02:c4:47:1e:bf:3e:a5:9a:
                    66:0b:19:57:fe:8d:46:15:44:5f:5d:c8:2f:98:b5:
                    ee:8e:48:a8:0f:c6:60:be:c0:a4:39:54:fc:d8:2f:
                    43:aa:d7:d6:9d:59:81:a5:aa:99:84:9a:bb:f5:f7:
                    59:b2:a8:78:00:0a:2e:58:d1:bc:3c:8d:50:2f:87:
                    6a:f1:74:37:06:a8:3e:4c:05:68:cd:1a:c4:8b:91:
                    6b:1e:1a:7e:21:8c:95:63:63:58:fe:d9:a0:a4:44:
                    b9:c1:cb:b6:62:5a:68:37:8c:34:50:e5:7c:a2:bf:
                    c8:4c:33:ed:a8:8e:f1:fe:d0:a7:7c:3c:ff:b7:91:
                    d9:bb:6c:60:af:04:14:56:14:ec:76:4c:01:39:4e:
                    9c:e3:bf:58:ec:b7:80:7f:0d:df:25:7c:02:5c:5e:
                    6e:f8:11:ec:53:da:5c:2e:0c:30:45:79:d8:92:6f:
                    fd:bd:a7:e4:bd:8c:4b:d3:79:33:36:88:12:3a:7e:
                    d7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:13:1E:48:FE:F9:72:1B:A6:A7:43:2D:26:07:85:EA:33:52:00
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:2e:a9:42:3e:7b:47:b0:a7:9d:4d:39:b2:bd:6c:6e:c6:
         ba:96:bf:b2:18:15:63:d6:7c:10:76:45:70:84:5a:93:98:01:
         ad:4f:d6:98:e7:30:36:21:63:e5:77:8c:7f:ea:94:80:5b:d5:
         82:3a:5a:d4:c4:ad:0f:10:29:a8:25:9f:76:57:59:09:fe:77:
         9d:f3:3b:11:0a:57:e6:54:d9:ff:9d:e3:f6:24:56:2e:4e:15:
         b1:47:6e:d1:23:5f:bf:83:93:ef:91:4c:b5:99:02:1a:fb:06:
         2e:78:46:0b:a4:bb:ef:f5:a4:4d:b4:c6:70:54:75:70:9d:85:
         39:39:55:2f:3d:cb:ad:0e:99:5b:3e:da:1d:61:38:bf:b7:6c:
         ad:28:f7:1f:ba:d2:1d:75:e4:7a:44:9f:a4:be:83:ed:5b:5b:
         09:f5:b6:72:5a:90:81:92:13:89:e8:bc:7f:87:db:d8:85:d8:
         51:47:7d:96:47:c2:e5:ba:d5:d1:5b:41:4f:72:12:17:b5:9a:
         ba:a5:0a:00:81:25:e1:f1:46:6d:0f:d0:fc:27:e8:5b:cf:1c:
         0a:ca:1d:fc:95:37:64:02:12:3a:23:3a:e1:16:65:93:4f:42:
         4c:04:ac:94:5f:41:fe:1c:5a:49:79:f5:16:ff:d3:b4:3d:99:
         8a:9f:26:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----