Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/VWIKt5vbEfsUDUUc7d4NQKTaizY.roa
File:                     VWIKt5vbEfsUDUUc7d4NQKTaizY.roa (raw, json)
Hash identifier:          J/gZE2VrDTvOfVG8hwNP/4/0MbZWeZwrWy9QhY9ZY7E=
Subject key identifier:   55:62:0A:B7:9B:DB:11:FB:14:0D:45:1C:ED:DE:0D:40:A4:DA:8B:36
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0CB9
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/VWIKt5vbEfsUDUUc7d4NQKTaizY.roa
Signing time:             Wed 29 Sep 2021 02:42:05 +0000
ROA not before:           Wed 29 Sep 2021 02:42:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        2404:4fc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3257 (0xcb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep 29 02:42:05 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=55620AB79BDB11FB140D451CEDDE0D40A4DA8B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:b3:52:a3:2a:fc:97:7e:5c:7a:87:b1:66:
                    e7:2d:5f:c7:de:a4:05:b4:17:ef:37:5e:45:ad:cd:
                    b3:d6:a0:95:15:8b:e5:3d:ec:4a:08:49:a1:d5:20:
                    c6:3c:93:f6:8a:59:8d:37:f3:87:b9:68:b0:ea:56:
                    ab:e5:f5:e8:95:49:1e:9d:58:93:0b:27:b7:33:d4:
                    ac:3b:23:41:88:c8:58:5d:50:01:d5:61:93:3f:4f:
                    db:19:a5:15:aa:07:77:b1:7e:f3:17:0f:cc:bc:7a:
                    57:d0:d6:e5:e7:d3:70:54:d5:42:fa:be:ee:e6:fb:
                    a4:26:1b:67:23:2c:2d:fd:56:5c:36:c6:e2:37:f4:
                    f3:8b:e4:c0:52:4e:1a:e9:73:35:76:ad:49:a8:bc:
                    03:8d:36:c2:36:a9:a6:83:db:fa:39:2e:f8:5a:be:
                    d3:f1:7e:3c:c9:bf:7e:88:08:ce:5c:16:2f:d9:7d:
                    be:87:51:85:d9:1c:6b:4a:cd:5d:60:19:57:bc:8b:
                    c0:e4:a4:aa:b0:b0:98:16:63:64:e4:ce:4d:41:b6:
                    85:b8:6c:4f:40:3b:24:37:b9:8c:90:f1:cc:66:70:
                    cc:9e:20:89:58:be:bd:3e:23:40:93:3c:6f:a7:73:
                    b2:04:b8:ae:c8:62:dd:ed:e3:13:db:ab:5c:1e:5e:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:62:0A:B7:9B:DB:11:FB:14:0D:45:1C:ED:DE:0D:40:A4:DA:8B:36
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/VWIKt5vbEfsUDUUc7d4NQKTaizY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:88:cb:0f:5a:77:be:57:c8:06:01:da:c5:2d:91:dd:e0:
         cb:56:ca:b1:93:4d:3b:f8:c2:bc:14:80:f2:d5:b8:36:04:c9:
         4c:0a:16:d4:d8:34:c0:e4:44:61:84:62:88:c7:64:91:5a:65:
         06:0a:e6:ac:9f:a3:10:b4:bc:fa:ee:68:f0:94:97:49:8e:e8:
         b4:03:2f:65:ba:44:33:2c:3e:23:d3:8c:aa:d5:41:f9:9d:8d:
         da:e5:cc:e1:cb:17:94:24:9f:21:50:72:8d:7b:72:48:3f:74:
         2d:84:7e:ad:a1:3b:31:61:a0:f2:a8:84:3a:49:71:2f:df:2e:
         be:5e:ef:01:51:20:0c:3c:9b:fd:2a:ea:0e:aa:1f:f2:0f:ea:
         89:58:d1:8a:22:ce:3e:9c:0a:61:3d:cc:7f:89:86:ad:32:af:
         c7:c2:44:f9:66:a9:37:39:dd:61:71:13:0e:be:e0:2a:b7:1d:
         01:d0:93:a6:54:e3:91:0a:60:7c:05:c2:81:be:b7:70:49:1b:
         7a:a5:30:df:30:d5:3d:63:80:dd:85:8d:a7:20:a9:89:04:d9:
         33:de:ea:54:56:2c:9a:b9:85:6f:8a:c2:5e:fe:f0:ed:ba:2e:
         a4:af:a6:c6:2e:ef:0c:3c:a1:04:0c:e0:28:9b:18:45:1d:02:
         c0:f0:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----