Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/x8CZYHUh0TH61gdP9XPcCTnW588.roa
File:                     x8CZYHUh0TH61gdP9XPcCTnW588.roa (raw, json)
Hash identifier:          Xm52gYUaj29rEcg3EF5P6RG1HZtMAwiVKl1YopcYXrs=
Subject key identifier:   C7:C0:99:60:75:21:D1:31:FA:D6:07:4F:F5:73:DC:09:39:D6:E7:CF
Certificate issuer:       /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial:       1197
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/x8CZYHUh0TH61gdP9XPcCTnW588.roa
Signing time:             Fri 01 Sep 2023 10:01:49 +0000
ROA not before:           Fri 01 Sep 2023 10:01:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     23675
IP address blocks:        103.132.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4503 (0x1197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
        Validity
            Not Before: Sep  1 10:01:49 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C7C099607521D131FAD6074FF573DC0939D6E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:28:3d:c8:14:56:39:e9:fe:60:42:58:4f:
                    cf:d9:5e:6f:89:06:33:44:dc:72:27:99:89:e6:fc:
                    c3:e6:80:9f:a3:5f:0c:8f:e0:67:a4:ed:3a:17:41:
                    74:e4:87:90:a3:aa:22:0b:57:27:27:6f:27:ff:7b:
                    20:aa:b0:60:5d:14:32:20:b7:53:0b:2c:85:a2:08:
                    80:22:98:cc:42:fc:59:55:8a:91:ad:e4:de:4d:8a:
                    a5:94:d5:98:bf:07:19:bd:d4:db:e0:bc:16:75:3d:
                    ff:a2:0a:20:02:77:c9:a0:93:5b:87:23:d7:ad:1e:
                    9b:69:25:16:eb:20:8d:69:ce:33:61:93:c5:b3:f3:
                    ac:cb:fc:4f:fb:9b:42:78:50:f5:25:f6:f3:71:80:
                    d4:b7:67:66:23:a2:5c:b4:b0:a5:7e:29:b9:d6:72:
                    75:d4:23:e9:12:83:3e:74:74:a4:9d:00:3c:22:7f:
                    02:c0:af:81:d7:e6:75:9a:c0:fd:aa:14:cc:36:1d:
                    f7:86:07:ca:1f:2e:4f:3e:43:1a:7a:ed:38:16:f1:
                    08:d6:f7:9f:99:e7:e6:26:e7:47:a8:f1:4c:38:ec:
                    20:3f:e1:15:46:a5:19:0f:6e:4d:a5:d0:b1:48:ca:
                    e7:53:4c:4d:2d:50:40:fd:92:b6:a5:29:54:32:2a:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:99:60:75:21:D1:31:FA:D6:07:4F:F5:73:DC:09:39:D6:E7:CF
            X509v3 Authority Key Identifier:
                keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/x8CZYHUh0TH61gdP9XPcCTnW588.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:60:81:92:08:bd:93:2e:8c:72:fa:15:5b:e9:39:dc:c2:d4:
         b4:21:75:6c:7c:af:6b:da:57:da:e6:24:2e:25:ea:39:a9:bd:
         3c:83:a8:5e:4e:ac:71:ae:21:7d:45:49:fc:9e:5c:dc:03:bd:
         0b:d3:04:01:bb:48:ea:12:3e:a2:6c:96:9a:e0:b2:4d:14:1a:
         5e:7e:cd:10:24:3a:16:ee:cc:6d:51:bb:9d:fc:d5:91:1d:b0:
         69:94:76:c3:20:14:2d:75:31:63:f6:f7:e9:01:ad:04:84:76:
         c7:60:22:a4:15:d9:66:0f:8e:b9:76:87:f0:85:45:34:3d:09:
         78:83:1e:a2:c2:54:74:cb:5e:a9:51:17:6d:cd:11:db:b2:26:
         15:aa:ca:c4:3f:41:bb:85:65:d4:18:cb:52:d8:74:b0:3a:c7:
         0e:1b:11:1e:da:6e:b3:46:56:76:78:67:22:cc:af:68:81:9b:
         1e:d7:34:61:b5:95:1b:9c:17:b5:e9:63:16:71:a3:1b:e3:6e:
         7b:a4:d8:e6:da:b1:60:fd:22:d4:44:a6:93:a3:db:5d:3e:da:
         e6:ff:00:59:e8:92:25:e6:59:a3:c8:4a:7c:a9:9f:8d:1c:dc:
         66:4c:3f:13:0c:67:6c:e9:9f:ce:33:71:49:f7:0c:e0:4d:20:
         c4:0c:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----