Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/xIfmnW0v8H8GKUnn_C464BH25fs.roa
File:                     xIfmnW0v8H8GKUnn_C464BH25fs.roa (raw, json)
Hash identifier:          DsRj4zii0rNPlpfSTVa0/5+eG4QVdcZdA2iOgKPDdXI=
Subject key identifier:   C4:87:E6:9D:6D:2F:F0:7F:06:29:49:E7:FC:2E:3A:E0:11:F6:E5:FB
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       078A
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/xIfmnW0v8H8GKUnn_C464BH25fs.roa
Signing time:             Tue 29 Sep 2020 10:09:09 +0000
ROA not before:           Tue 29 Sep 2020 10:09:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24157
IP address blocks:        2401:7080::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Sep 29 10:09:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C487E69D6D2FF07F062949E7FC2E3AE011F6E5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:12:78:47:8e:2b:be:a4:18:2d:95:c4:ed:
                    e3:2c:51:73:07:b6:3f:1d:c8:68:f0:50:7a:d6:e2:
                    0a:9c:40:a4:b4:1d:b0:12:1c:19:88:37:12:79:f3:
                    4a:a4:c8:36:98:40:c8:77:64:60:fa:6e:f2:a9:02:
                    d4:32:8e:4d:6f:d1:ee:85:25:71:b4:cf:86:48:38:
                    0b:01:64:81:e8:07:dc:f5:56:69:3c:07:40:28:91:
                    0b:bd:41:d1:5c:35:c3:93:73:a4:f6:7e:b2:a7:5c:
                    06:9d:7a:0b:e4:09:51:4d:95:2e:0e:bd:fa:63:9b:
                    ea:46:2d:ba:48:cb:1c:6b:f9:f1:35:45:5b:e0:d9:
                    b1:04:f5:d9:98:3d:98:d9:54:5b:9d:2d:95:7b:05:
                    4b:a8:9b:24:bb:aa:5d:43:f2:84:3e:e0:29:21:c0:
                    9e:6d:60:72:ed:60:c0:0e:33:a2:17:4c:ec:93:eb:
                    81:3d:c8:bb:aa:37:18:a0:03:81:3d:33:6d:b5:4a:
                    16:04:0c:fb:70:88:30:78:f5:ca:7a:21:8a:81:6e:
                    1c:ca:d6:7c:41:45:c9:b6:cb:e0:bf:10:60:61:cc:
                    10:cb:e6:c5:68:a4:ba:bb:18:45:40:67:e1:92:fe:
                    49:92:53:e4:5a:e7:ed:32:8d:00:cf:e8:7e:23:17:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:E6:9D:6D:2F:F0:7F:06:29:49:E7:FC:2E:3A:E0:11:F6:E5:FB
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/xIfmnW0v8H8GKUnn_C464BH25fs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:63:95:1f:15:4f:d6:4c:d2:e2:82:03:01:70:36:bf:6b:
         17:3a:ed:13:9a:7d:0c:ab:56:8b:70:d5:09:49:70:d6:49:25:
         00:9d:00:bc:24:5e:82:7e:bc:9b:3c:13:d3:87:55:f2:21:a9:
         54:09:b3:d4:c6:8d:38:54:8a:18:11:cc:34:e1:35:b3:a7:5b:
         48:35:9a:3b:3c:4a:a3:7c:f0:3d:5f:98:25:af:13:46:52:53:
         fb:33:60:e6:3d:66:83:d8:5f:15:5f:3d:83:b4:c5:3b:75:61:
         5a:b3:08:0a:9a:25:00:1b:6d:9c:6a:29:87:fc:af:7e:9b:aa:
         e2:de:4e:85:bd:b5:84:f7:5e:46:c0:aa:69:c3:94:eb:94:27:
         b2:b5:12:7e:a2:8c:00:c3:37:4b:e7:47:b2:3a:b7:47:d0:dd:
         83:4b:db:4b:38:4f:46:2d:5c:e0:7e:c2:ef:d7:10:94:d8:87:
         c1:b6:2f:75:3f:3f:20:e9:06:d1:93:dd:28:ef:36:5c:3d:0d:
         88:b7:78:af:13:58:a1:9c:70:a6:47:56:be:a1:73:d8:f4:74:
         b2:65:af:43:14:0b:35:f5:ad:1a:df:95:06:0b:12:cb:83:2d:
         5c:7a:fc:16:e2:f1:0e:2d:01:7f:59:64:d7:69:ba:18:09:39:
         25:87:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----