Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Jp12o3b-P-7tCcKu4I1xVs0usLo.roa
File:                     Jp12o3b-P-7tCcKu4I1xVs0usLo.roa (raw, json)
Hash identifier:          jlVqVWRu/nj6eNka/qTVsgfv33hWhFqoiWajxXm8euc=
Subject key identifier:   26:9D:76:A3:76:FE:3F:EE:ED:09:C2:AE:E0:8D:71:56:CD:2E:B0:BA
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0CCF
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Jp12o3b-P-7tCcKu4I1xVs0usLo.roa
Signing time:             Wed 29 Sep 2021 02:53:04 +0000
ROA not before:           Wed 29 Sep 2021 02:53:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     138145
IP address blocks:        2404:7340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 02:53:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=269D76A376FE3FEEED09C2AEE08D7156CD2EB0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:cf:d1:35:ad:a1:58:e6:73:8b:7c:ac:04:
                    05:e8:99:8a:8c:cb:38:f9:af:0a:e7:9e:d2:09:1a:
                    38:21:56:e3:42:ae:70:10:6d:bd:c0:41:3e:85:3f:
                    e0:df:b2:3c:d8:42:a6:43:bd:a9:fb:b9:64:85:05:
                    04:17:00:37:16:36:19:9f:ac:e1:ea:be:ab:53:be:
                    07:b3:12:ae:90:0e:8e:d6:70:96:42:a6:c5:0e:ba:
                    27:37:2b:c4:f6:50:8d:9a:30:20:72:d8:b6:c6:49:
                    2c:f5:f6:3e:f3:6d:c3:73:ff:8f:6e:09:87:09:3f:
                    b6:31:30:14:e9:27:78:05:c4:46:81:c1:e7:cb:ac:
                    73:e2:29:6c:71:8c:c7:64:75:01:4b:4e:20:79:26:
                    27:50:a0:fe:a3:cc:6e:f2:93:d7:c5:1c:b5:b8:00:
                    fb:18:8e:bc:67:43:84:9d:8f:74:f8:fc:fc:e2:c4:
                    8e:9f:70:c0:40:b9:5b:d4:2e:9b:72:7e:b8:31:3b:
                    d6:d2:52:82:bf:1d:43:7e:f7:c6:5d:d6:32:f6:cb:
                    8c:a7:56:0a:66:61:19:33:f2:79:41:45:b8:9b:75:
                    fb:df:aa:f1:e7:e9:4c:1c:f9:cb:c3:c5:14:d3:98:
                    0f:bc:7e:a8:88:5f:ec:61:d2:c8:3a:4b:d2:b8:3b:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:76:A3:76:FE:3F:EE:ED:09:C2:AE:E0:8D:71:56:CD:2E:B0:BA
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Jp12o3b-P-7tCcKu4I1xVs0usLo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:30:73:a5:65:2b:e2:32:4f:85:94:3e:7b:79:4f:c0:8e:35:
         00:c4:fe:34:f7:e5:51:fa:9f:f9:7d:40:69:2d:82:d1:78:74:
         0a:6b:b7:12:08:9a:de:ea:f6:c0:5b:c2:a7:e7:1a:7d:13:77:
         97:dd:d3:d0:db:05:7d:6d:02:83:08:2e:11:ca:28:57:e5:cc:
         36:e1:54:9b:c5:a2:32:6c:ec:6a:4b:63:0c:15:93:c3:01:a0:
         a2:26:67:f2:3d:bf:33:82:a1:c9:2b:7d:0c:df:63:a3:b1:35:
         7e:5b:97:11:06:a5:4c:56:63:d4:0e:db:45:08:5c:5a:01:3e:
         d6:bd:d9:4a:4f:0d:6e:9b:55:a0:68:8d:ca:67:cd:61:ef:04:
         72:2c:8a:13:00:6a:f9:be:8b:35:4a:3f:b0:ad:47:ce:cf:41:
         f4:37:55:de:86:de:31:02:bf:40:4c:42:4d:1a:24:39:7c:52:
         a8:3f:d7:a5:9f:a8:30:27:ea:d9:13:8f:cd:98:2d:e1:76:5f:
         1d:b4:a8:f8:25:b8:20:0c:fe:fa:b7:9c:07:cd:0f:e5:34:b7:
         9f:2a:26:5b:26:9c:41:c1:69:16:9d:b2:26:bd:90:a7:1c:92:
         75:70:83:98:d3:a0:97:1d:ce:4d:76:71:24:30:10:7d:14:c9:
         fe:09:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----