Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNOC/828DjBrNaDBjl2fpFQogLxUSM0w.roa
File:                     828DjBrNaDBjl2fpFQogLxUSM0w.roa (raw, json)
Hash identifier:          rHjnUGfhNSm2GeJbCS6/Ho0rs0rQ7IuO9+6zTQyMeFU=
Subject key identifier:   F3:6F:03:8C:1A:CD:68:30:63:97:67:E9:15:0A:20:2F:15:12:33:4C
Certificate issuer:       /CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Certificate serial:       0F8E
Authority key identifier: 23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/828DjBrNaDBjl2fpFQogLxUSM0w.roa
Signing time:             Wed 29 Sep 2021 02:51:35 +0000
ROA not before:           Wed 29 Sep 2021 02:51:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131149
IP address blocks:        103.123.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3982 (0xf8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
        Validity
            Not Before: Sep 29 02:51:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F36F038C1ACD6830639767E9150A202F1512334C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:fe:cc:02:3e:c4:96:c9:0a:d7:0f:ae:4a:
                    8c:41:c3:7a:d6:67:35:f3:94:b6:87:ef:f0:f2:2a:
                    23:f5:53:c9:98:54:52:7b:ad:dc:18:ff:87:19:ef:
                    ec:e8:c4:f5:7b:5d:ad:c7:32:e7:1e:a7:22:d1:5c:
                    de:4c:e3:d2:4d:b2:93:5d:e4:7e:a9:17:5b:76:66:
                    79:69:ba:71:41:9d:5a:69:81:3a:f0:88:76:08:76:
                    fa:15:60:78:dc:6b:bb:d8:60:ec:c5:a5:7b:24:70:
                    f8:0f:f4:d6:44:d2:69:5b:d1:21:e4:2f:5b:82:14:
                    84:53:1c:53:8c:66:87:2b:ba:e4:c1:0a:a5:9c:ee:
                    4d:72:c5:53:ad:7e:cc:d4:04:87:ce:db:bf:07:03:
                    69:56:55:6d:9d:a4:6c:85:7d:cf:37:77:e1:54:58:
                    d8:2b:9a:b3:44:72:0b:ec:62:d9:52:bd:29:da:0a:
                    76:4d:dd:65:1c:ff:f5:06:69:ce:cf:76:be:ae:a2:
                    eb:c2:78:19:f5:b0:da:8b:d0:9f:25:28:02:53:53:
                    e9:07:06:72:81:fd:54:44:c3:b4:7a:8b:27:4e:0f:
                    5b:0d:32:fe:24:67:44:e9:50:f3:75:c7:0e:56:92:
                    86:9b:6a:ff:9d:5e:1f:12:a3:17:1e:b8:22:ce:d2:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:03:8C:1A:CD:68:30:63:97:67:E9:15:0A:20:2F:15:12:33:4C
            X509v3 Authority Key Identifier:
                keyid:23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/828DjBrNaDBjl2fpFQogLxUSM0w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:26:e4:c2:c4:04:75:00:3d:bd:b6:59:02:2d:0f:85:ef:12:
         e4:e5:1d:d1:f5:0c:39:48:07:8e:32:82:57:30:7e:dc:e8:3a:
         27:f5:2b:9e:5e:40:7d:23:60:d8:29:29:29:e6:46:0f:0f:ca:
         ca:1f:41:13:43:b2:b8:33:37:8b:b2:28:25:0f:43:53:2d:a4:
         70:7f:d2:dc:db:68:43:bc:68:1c:31:d8:f0:f9:73:e0:26:f0:
         8e:d1:c2:62:d3:0b:b2:39:89:57:cb:29:48:7f:4d:6f:40:f5:
         3d:cf:43:c1:5e:00:7a:b9:0c:52:aa:9f:b3:83:5d:8e:47:78:
         fb:bb:f0:9a:72:ad:c7:10:56:94:77:34:23:9f:7e:81:89:a1:
         aa:b9:6d:da:dd:33:05:60:e2:b4:7c:4f:cc:1b:14:f5:02:25:
         86:6e:38:0a:fd:71:c8:df:84:e5:2d:3f:10:2e:f8:ce:b5:d0:
         37:74:74:63:fe:7c:3b:8c:f5:3a:49:4d:89:49:8e:68:57:97:
         5c:16:54:ff:83:b3:f3:4a:75:c7:f2:d1:e1:02:96:bd:3a:35:
         c9:86:64:37:2d:55:cf:dd:7f:e2:60:40:1a:d4:bb:4d:45:14:
         1a:04:09:f4:0a:b1:63:27:bb:47:fc:5f:9b:e4:05:35:eb:80:
         6a:80:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----