Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa
File:                     8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa (raw, json)
Hash identifier:          hFRZJZ9Fjd9gGNg6NSMFgpHpByms4U69N0WTXNaFRc4=
Subject key identifier:   F1:96:07:D8:C3:94:38:FC:82:0D:B4:F7:56:EF:BA:C0:D4:E3:25:E1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa
Signing time:             Fri 01 Sep 2023 10:08:08 +0000
ROA not before:           Fri 01 Sep 2023 10:08:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10916 (0x2aa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F19607D8C39438FC820DB4F756EFBAC0D4E325E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:39:18:1e:ee:68:51:3e:a2:62:61:b7:a8:
                    76:f2:c9:b7:8d:67:ec:74:9c:c4:6d:51:6f:86:eb:
                    36:bd:01:39:42:9f:7c:30:e1:5a:db:c8:e3:7e:5a:
                    84:46:60:11:9b:bb:f4:2a:75:47:ef:7b:33:b9:0e:
                    9c:b5:96:70:a8:e1:7d:27:20:38:fb:26:37:4b:fb:
                    77:3a:72:e6:41:c9:a3:9c:a2:bf:fe:d7:d9:47:53:
                    52:c0:5a:f3:72:0d:07:90:a6:a5:0d:6c:16:d1:e3:
                    0a:16:62:29:5c:4b:88:dd:37:82:7f:37:fe:69:9d:
                    86:aa:d0:e6:df:87:fe:0c:df:51:f6:64:72:51:2b:
                    81:26:b8:e7:c5:74:e4:e3:66:07:9d:10:32:be:ff:
                    62:2f:53:e7:67:11:f0:68:02:b9:0b:f9:eb:46:1b:
                    15:4f:d9:50:10:86:7a:af:50:b6:a6:40:5a:9c:81:
                    a9:fc:c1:3a:35:c5:c6:dc:68:63:0f:81:df:be:28:
                    d1:f9:fa:81:b4:94:f9:26:1c:1f:0c:84:9d:c7:20:
                    50:bd:44:27:8d:fa:99:bf:b5:5c:1c:31:58:35:4d:
                    88:f0:a4:ca:2e:17:b9:36:48:e8:1f:23:cf:15:e9:
                    22:25:49:c9:d2:40:78:30:14:59:0c:de:f2:d5:5e:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:07:D8:C3:94:38:FC:82:0D:B4:F7:56:EF:BA:C0:D4:E3:25:E1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ZYH2MOUOPyCDbT3Vu-6wNTjJeE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:6c:12:08:37:99:e2:3d:22:40:f7:56:16:d1:6b:a7:bd:
         4b:f0:75:b2:32:70:44:00:12:7b:0b:7d:ee:33:20:57:a2:13:
         4d:2e:2b:36:eb:6e:d9:d6:7e:7a:24:73:33:f4:64:f1:84:b6:
         01:b9:f6:78:76:79:1d:57:41:e8:90:d9:bd:2c:ab:50:91:e5:
         e6:e1:ca:2d:a5:2e:10:ae:cc:7a:3e:0a:8d:10:e7:7a:81:4e:
         91:8c:25:87:34:c9:25:ba:03:54:d3:50:27:ac:f6:62:80:5b:
         95:c0:74:e6:95:97:ba:d9:41:f9:87:18:6e:e4:58:9f:b4:60:
         9c:cf:6e:92:80:99:85:f3:85:b4:63:4e:a9:b4:d0:5c:1f:1a:
         9f:ca:7f:2d:cd:96:42:f5:7e:f3:26:63:ef:c9:1a:3e:2c:93:
         a9:e7:cb:75:e8:dc:10:b3:dd:5a:43:10:56:79:1e:ff:54:ed:
         78:f1:ff:b6:fb:9d:71:13:e5:aa:ac:91:63:01:1e:91:94:46:
         22:79:32:ae:8a:19:71:07:be:7f:c1:fa:47:6c:ad:c3:90:30:
         3f:3e:3c:c6:50:10:ee:a7:f4:6a:ca:b5:60:a4:5c:bf:bd:13:
         af:b7:61:ad:29:03:04:7d:9b:e1:92:db:f4:bc:fa:e0:f5:0e:
         e5:8d:f3:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxOTYwN0Q4QzM5NDM4
RkM4MjBEQjRGNzU2RUZCQUMwRDRFMzI1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcvjkYHu5oUT6iYmG3qHbyybeNZ+x0nMRtUW+G6za9ATlCn3ww
4VrbyON+WoRGYBGbu/QqdUfvezO5Dpy1lnCo4X0nIDj7JjdL+3c6cuZByaOcor/+
19lHU1LAWvNyDQeQpqUNbBbR4woWYilcS4jdN4J/N/5pnYaq0Obfh/4M31H2ZHJR
K4EmuOfFdOTjZgedEDK+/2IvU+dnEfBoArkL+etGGxVP2VAQhnqvULamQFqcgan8
wTo1xcbcaGMPgd++KNH5+oG0lPkmHB8MhJ3HIFC9RCeN+pm/tVwcMVg1TYjwpMou
F7k2SOgfI88V6SIlScnSQHgwFFkM3vLVXvmpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8ZYH2MOUOPyCDbT3Vu+6wNTjJeEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhaWUgyTU9VT1B5Q0RiVDNW
dS02d05UakplRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6EgwDQYJKoZIhvcNAQELBQADggEBAFWlbBIIN5niPSJA91YW0WunvUvwdbIycEQA
EnsLfe4zIFeiE00uKzbrbtnWfnokczP0ZPGEtgG59nh2eR1XQeiQ2b0sq1CR5ebh
yi2lLhCuzHo+Co0Q53qBTpGMJYc0ySW6A1TTUCes9mKAW5XAdOaVl7rZQfmHGG7k
WJ+0YJzPbpKAmYXzhbRjTqm00FwfGp/Kfy3NlkL1fvMmY+/JGj4sk6nny3Xo3BCz
3VpDEFZ5Hv9U7Xjx/7b7nXET5aqskWMBHpGURiJ5Mq6KGXEHvn/B+kdsrcOQMD8+
PMZQEO6n9GrKtWCkXL+9E6+3Ya0pAwR9m+GS2/S8+uD1DuWN81Q=
-----END CERTIFICATE-----