Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-KLkBxgbWCHLStBBslLQnuCR0v0.roa
File:                     -KLkBxgbWCHLStBBslLQnuCR0v0.roa (raw, json)
Hash identifier:          hlcLq/8vzuzFkf7Bx9ah8En03Bbphr9yGxUG4uLYtLs=
Subject key identifier:   F8:A2:E4:07:18:1B:58:21:CB:4A:D0:41:B2:52:D0:9E:E0:91:D2:FD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-KLkBxgbWCHLStBBslLQnuCR0v0.roa
Signing time:             Fri 01 Sep 2023 10:04:38 +0000
ROA not before:           Fri 01 Sep 2023 10:04:38 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff0b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10204 (0x27dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:38 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F8A2E407181B5821CB4AD041B252D09EE091D2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:5f:15:92:71:c8:29:a8:e5:4f:ab:e2:ba:
                    08:73:e2:1d:aa:ea:28:0f:e3:ca:7f:3e:5b:0e:69:
                    3c:32:5d:ee:b6:93:90:f1:61:50:9f:78:39:a9:93:
                    a1:f3:dc:0a:5b:ff:e3:95:d3:42:4c:0e:78:6f:1d:
                    7d:ca:2c:3e:8d:9d:0c:6d:fe:fe:24:ec:0d:bc:97:
                    44:89:a2:ba:9d:74:a6:7c:ab:57:7b:c2:20:07:1d:
                    4e:08:ff:ea:bd:d1:19:ff:45:e8:68:74:42:98:5f:
                    bb:c1:2a:f6:af:1d:b6:93:75:d9:75:b9:d9:36:70:
                    71:fd:f7:7b:04:58:75:0c:2b:61:5c:5c:a3:19:e2:
                    ee:dc:52:6a:7a:b8:59:68:e5:22:f8:cb:da:26:fc:
                    fb:7d:26:4b:b7:a6:45:76:7f:14:bd:df:1f:78:dc:
                    67:90:5f:a0:9b:5a:bf:fe:ce:58:a2:4e:94:01:b3:
                    ce:13:97:31:c3:c8:b3:db:f1:20:2b:1e:f2:b8:31:
                    9f:32:07:a7:ec:09:2c:a0:a9:11:fc:76:35:bd:ce:
                    df:61:cc:08:27:b0:b3:be:70:05:5e:01:70:35:d9:
                    7f:28:1e:7f:dd:e3:0d:e6:83:d2:43:db:c6:01:a8:
                    de:9d:55:27:60:40:a5:51:40:a5:36:29:51:cd:be:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:E4:07:18:1B:58:21:CB:4A:D0:41:B2:52:D0:9E:E0:91:D2:FD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-KLkBxgbWCHLStBBslLQnuCR0v0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:22:e9:0b:9d:74:27:5d:22:44:bc:f0:16:a1:e5:3d:3e:2c:
         a6:82:8f:bc:8d:d5:dc:d5:54:98:26:b2:d3:d3:d3:04:ef:2e:
         c4:b8:e7:b6:d9:61:02:e9:8b:18:17:83:42:7a:5e:3b:e7:74:
         66:79:45:81:40:93:b1:4b:8f:0c:08:93:dd:96:e3:7f:14:d5:
         da:d9:82:3d:88:a0:18:17:81:7c:65:45:c4:be:ae:ac:35:ae:
         e1:44:d9:6f:b4:7b:a0:cc:23:d7:13:b7:42:02:c7:0c:22:9a:
         71:81:9a:c4:41:08:28:20:92:1f:01:40:00:62:f6:4f:7a:b2:
         16:ba:a3:47:ec:41:be:fc:51:81:79:4f:97:0a:be:48:79:bb:
         4a:96:93:ef:1a:05:ca:56:4b:db:7f:66:02:e4:e1:53:7d:62:
         b0:ee:d0:b5:a1:10:c0:dd:b2:8d:ab:0b:3c:e9:41:11:e4:0a:
         6e:b5:7f:94:eb:81:da:9f:01:23:9a:eb:4e:c4:cc:f9:0f:31:
         28:3d:0e:96:bb:6f:63:8d:b9:ac:41:9e:72:71:cc:dc:84:91:
         2c:a8:2e:d6:4b:32:31:39:a7:87:fc:b8:57:fd:ac:ee:ed:e9:
         23:46:fc:37:e1:7d:14:21:2e:91:3b:1f:ff:bb:d0:3b:52:d8:
         24:d4:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----