Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/0DbYwsoRnJ5e6BP8WAGFAfqBVRQ.roa
File:                     0DbYwsoRnJ5e6BP8WAGFAfqBVRQ.roa (raw, json)
Hash identifier:          ML3ChE0CfX3CYAbEOGDqsmcJDndCtgVmhzJYqHtSXi4=
Subject key identifier:   D0:36:D8:C2:CA:11:9C:9E:5E:E8:13:FC:58:01:85:01:FA:81:55:14
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0AE4
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/0DbYwsoRnJ5e6BP8WAGFAfqBVRQ.roa
Signing time:             Tue 29 Sep 2020 10:00:46 +0000
ROA not before:           Tue 29 Sep 2020 10:00:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        2404:7340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 10:00:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D036D8C2CA119C9E5EE813FC58018501FA815514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:32:08:7a:b8:3d:1c:ac:2b:37:6f:f7:a3:
                    b5:3d:22:04:ba:72:7b:92:60:ff:3e:bf:7d:81:34:
                    fc:33:bb:3c:f9:dc:25:82:74:33:d9:e6:fd:ae:49:
                    95:c0:82:6a:7e:6c:c1:61:3f:9d:ab:37:7a:e1:2a:
                    71:95:ca:69:8a:1b:bf:bd:0d:4b:36:da:ba:32:46:
                    23:07:9b:7d:51:74:10:08:31:a8:cc:5f:d7:de:ac:
                    a8:4a:fb:f4:b4:9f:2d:64:47:85:fb:06:48:d9:90:
                    04:0c:1a:36:f6:27:f9:14:b1:28:9b:8a:25:0d:54:
                    c5:0b:9f:fa:7f:8b:ae:5f:86:b1:9f:a7:77:2b:27:
                    70:65:33:3f:a1:f3:02:3a:15:f1:f0:46:5d:ad:8d:
                    78:36:9b:50:af:5d:14:74:78:ab:2c:bb:03:b6:b2:
                    3b:f3:3c:a0:f3:8c:4d:78:9e:2c:44:8e:d3:90:f1:
                    01:4c:3f:f8:1c:88:1a:91:6e:59:91:ca:c1:92:ba:
                    08:04:da:67:d0:a9:8f:21:f9:91:1e:5d:4b:95:04:
                    f8:b4:67:7e:61:ba:94:0d:6b:ba:b1:1d:3e:26:5c:
                    48:fc:3f:a2:5a:38:ea:a6:a4:12:c9:3b:f2:96:32:
                    fe:2a:6a:b9:65:26:00:c8:38:3a:2a:e8:cf:c1:44:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:D8:C2:CA:11:9C:9E:5E:E8:13:FC:58:01:85:01:FA:81:55:14
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/0DbYwsoRnJ5e6BP8WAGFAfqBVRQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:7d:d2:d1:16:6c:df:0a:21:97:e2:78:e1:a8:47:7f:2c:
         d7:07:3f:68:95:37:f8:a4:31:62:42:f6:4d:5f:a6:80:98:96:
         32:76:22:b6:de:f9:70:41:de:3e:d7:15:4f:02:7c:a1:aa:8f:
         d1:7b:7e:3b:be:55:1f:27:0e:60:c7:ad:57:ec:f8:e0:ec:8e:
         d7:2e:b6:3c:0a:f5:10:a8:12:b5:3c:72:71:68:bd:42:55:c9:
         d2:e7:32:2d:5a:7d:07:58:49:b0:1b:bb:7d:a5:35:ca:c9:78:
         1b:0d:38:ec:c1:fb:02:92:a4:d4:19:0c:16:bd:58:85:d4:b3:
         02:af:31:51:33:ed:1e:95:f6:d6:a1:14:e8:a6:36:52:ec:4f:
         19:f4:f0:74:db:22:b0:31:62:d5:16:d7:20:e7:04:ba:5f:32:
         08:38:a3:55:2c:2f:0e:a0:05:74:22:f4:ba:c3:71:4b:2a:f9:
         c6:38:7a:32:23:60:44:ad:11:ec:9d:ee:07:55:40:c9:20:b9:
         55:aa:7f:71:f2:40:59:bf:00:ba:be:33:13:ad:69:de:33:cd:
         b4:f2:fe:88:a6:7f:ee:b2:d7:d7:27:a3:02:c6:fd:e5:67:b7:
         f2:f4:8e:e5:42:77:11:dd:10:3a:ce:c2:ac:b2:6f:0c:8e:fb:
         14:e4:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----