Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7N4D9vclHyyRDASIURP7yHpg3Ec.roa
File:                     7N4D9vclHyyRDASIURP7yHpg3Ec.roa (raw, json)
Hash identifier:          gNOVIn9sAInkxb/tBLfHOpJKdItLZZrZU36502/JIgY=
Subject key identifier:   EC:DE:03:F6:F7:25:1F:2C:91:0C:04:88:51:13:FB:C8:7A:60:DC:47
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2802
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7N4D9vclHyyRDASIURP7yHpg3Ec.roa
Signing time:             Fri 01 Sep 2023 10:04:50 +0000
ROA not before:           Fri 01 Sep 2023 10:04:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.14.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10242 (0x2802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=ECDE03F6F7251F2C910C04885113FBC87A60DC47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b4:f1:7e:ee:ec:8b:cb:22:53:9e:ce:23:46:
                    c8:a5:f7:f8:d3:cc:44:7f:73:da:72:f8:2d:bf:d8:
                    71:ef:03:f8:0e:6b:65:df:fe:f8:1f:03:1f:d1:b4:
                    ae:47:b5:18:7c:f8:39:8b:3e:7e:f0:b5:32:8a:36:
                    a3:fa:cb:34:8e:b7:0c:d8:a9:fc:2d:61:66:46:32:
                    62:ea:fb:e5:38:92:6c:f0:ad:e4:eb:78:51:53:92:
                    34:c0:21:b6:10:8a:64:da:1d:98:d4:8d:7c:20:2a:
                    2e:28:a2:b8:7f:8a:11:d5:a3:5a:51:61:e3:3b:40:
                    01:57:b5:ee:2b:47:73:07:67:22:8b:c7:2a:b3:06:
                    78:2a:73:d5:1c:a8:d9:dd:a9:f8:72:52:ac:e4:5b:
                    93:2c:60:bf:e7:c3:cd:ec:e2:56:b8:c1:b9:43:58:
                    cf:75:0a:a3:ce:7a:0d:27:48:39:ad:c1:c7:73:fe:
                    07:6b:2f:db:a8:0c:b8:4c:79:19:0a:ec:c4:4f:b3:
                    25:4c:f3:6c:ae:e1:ab:3a:f3:95:73:f7:c2:88:0d:
                    8b:0c:1b:bb:b8:5c:10:ff:57:5a:96:12:61:43:57:
                    b5:ed:81:63:54:19:99:52:07:13:cc:02:04:16:c8:
                    6f:27:06:0f:73:7a:d4:50:5c:36:69:e5:da:c9:d8:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DE:03:F6:F7:25:1F:2C:91:0C:04:88:51:13:FB:C8:7A:60:DC:47
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7N4D9vclHyyRDASIURP7yHpg3Ec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:40:84:fb:44:0c:12:4d:68:55:08:2b:a6:60:7b:fb:1a:61:
         a4:37:fd:f9:2d:2e:5b:f2:f0:2b:93:93:a3:7a:ee:0a:40:3b:
         c1:f9:0a:f9:c0:f8:91:19:bc:a7:6d:30:33:3a:de:e1:26:f2:
         0b:a0:54:00:17:6c:18:32:bf:5e:52:e0:22:48:db:9b:10:f9:
         bd:ce:7b:3d:4f:6d:48:90:cd:b2:ad:12:1c:8d:0a:f5:38:ed:
         da:f9:46:40:55:4d:1d:dc:94:06:5e:5d:91:7b:f7:fc:cc:e1:
         50:70:65:9c:d7:14:0f:1c:06:d0:44:6f:aa:ec:63:2b:59:ea:
         1a:98:f7:d9:22:dd:cf:28:ff:c6:fa:de:ee:7f:3f:0a:80:d8:
         e4:89:b7:bf:dd:fc:68:99:c2:c4:cd:45:ff:10:4b:13:b7:13:
         ff:73:5b:21:c1:c6:d8:4b:54:25:2b:42:e0:43:f6:b9:91:54:
         d8:fc:ec:73:6c:bb:2c:2a:9d:2f:bf:47:c0:2a:22:c5:f7:dc:
         96:ef:18:96:9a:26:a2:57:3d:79:21:b0:62:a0:00:fc:d9:dd:
         33:ae:12:7f:6f:56:99:f1:3d:a8:8b:27:b8:4b:f7:fe:82:16:
         65:2c:9e:4a:5b:4a:cc:9c:a2:6a:ef:8a:12:d9:60:99:7e:d2:
         52:41:26:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDREUwM0Y2RjcyNTFG
MkM5MTBDMDQ4ODUxMTNGQkM4N0E2MERDNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDutPF+7uyLyyJTns4jRsil9/jTzER/c9py+C2/2HHvA/gOa2Xf
/vgfAx/RtK5HtRh8+DmLPn7wtTKKNqP6yzSOtwzYqfwtYWZGMmLq++U4kmzwreTr
eFFTkjTAIbYQimTaHZjUjXwgKi4oorh/ihHVo1pRYeM7QAFXte4rR3MHZyKLxyqz
Bngqc9UcqNndqfhyUqzkW5MsYL/nw83s4la4wblDWM91CqPOeg0nSDmtwcdz/gdr
L9uoDLhMeRkK7MRPsyVM82yu4as685Vz98KIDYsMG7u4XBD/V1qWEmFDV7XtgWNU
GZlSBxPMAgQWyG8nBg9zetRQXDZp5drJ2HHzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7N4D9vclHyyRDASIURP7yHpg3EcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdONEQ5dmNsSHl5UkRBU0lV
UlA3eUhwZzNFYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AQ4wDQYJKoZIhvcNAQELBQADggEBAKRAhPtEDBJNaFUIK6Zge/saYaQ3/fktLlvy
8CuTk6N67gpAO8H5CvnA+JEZvKdtMDM63uEm8gugVAAXbBgyv15S4CJI25sQ+b3O
ez1PbUiQzbKtEhyNCvU47dr5RkBVTR3clAZeXZF79/zM4VBwZZzXFA8cBtBEb6rs
YytZ6hqY99ki3c8o/8b63u5/PwqA2OSJt7/d/GiZwsTNRf8QSxO3E/9zWyHBxthL
VCUrQuBD9rmRVNj87HNsuywqnS+/R8AqIsX33JbvGJaaJqJXPXkhsGKgAPzZ3TOu
En9vVpnxPaiLJ7hL9/6CFmUsnkpbSsycomrvihLZYJl+0lJBJrM=
-----END CERTIFICATE-----