Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/32332e3133332e382e302f32342d3234203d3e20393435.roa
File:                     32332e3133332e382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          f9oRwWdGg7SYdvYnQcnylZn7wmeVW/zQCesR2/Zakj0=
Subject key identifier:   6C:20:69:B6:0A:B7:C4:E0:99:FB:47:27:A4:6B:4F:53:21:A8:8B:7D
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       356425684E13DFCC6DC53D225E4D1830347051BE
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/32332e3133332e382e302f32342d3234203d3e20393435.roa
Signing time:             Sun 15 Oct 2023 04:06:51 +0000
ROA not before:           Sun 15 Oct 2023 04:01:51 +0000
ROA not after:            Sun 13 Oct 2024 04:06:51 +0000
asID:                     945
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:25:68:4e:13:df:cc:6d:c5:3d:22:5e:4d:18:30:34:70:51:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Oct 15 04:01:51 2023 GMT
            Not After : Oct 13 04:06:51 2024 GMT
        Subject: CN=6C2069B60AB7C4E099FB4727A46B4F5321A88B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:5d:7e:ef:58:d5:b5:e5:1d:04:b1:a4:97:
                    7a:d6:5f:d6:17:40:2c:7a:5c:d7:c5:c8:90:40:d8:
                    be:66:9f:87:b9:2e:ec:6d:39:57:f4:f6:b4:d8:44:
                    5d:c7:57:27:51:e8:e8:95:6e:01:e6:35:15:a3:51:
                    7c:fa:fb:aa:df:13:00:53:33:37:ae:5b:ec:94:31:
                    76:ca:79:2f:44:66:44:d7:c1:8a:55:9d:a7:89:ff:
                    f2:eb:05:ab:6c:ba:5d:b6:88:3a:d7:5f:2a:b8:b8:
                    72:c4:81:4f:9e:fa:72:fd:ef:9e:dc:3f:fb:81:77:
                    22:39:cd:3f:d3:97:2e:78:80:09:a4:b8:79:71:19:
                    eb:09:ce:ae:26:32:08:00:71:be:a1:e5:2d:e4:5f:
                    4f:9d:a5:67:f2:77:4a:81:40:fa:8d:38:c0:0c:97:
                    a2:74:a5:69:28:a9:2f:eb:3a:6b:3c:e8:71:9f:fa:
                    c8:e7:ac:13:2f:41:5c:19:bb:4b:78:d9:72:77:d2:
                    41:24:d8:1c:64:a8:72:fb:f9:f4:87:3c:35:22:f4:
                    78:5c:15:1d:ac:ba:05:20:8e:05:b9:e9:4c:e0:16:
                    e0:c3:6f:02:f3:4d:d1:40:c4:8a:f4:5b:1e:a2:d5:
                    7a:09:f4:60:33:0a:ef:15:c8:3b:97:f7:49:33:bd:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:69:B6:0A:B7:C4:E0:99:FB:47:27:A4:6B:4F:53:21:A8:8B:7D
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/32332e3133332e382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:48:92:00:cf:0c:b4:21:8d:bb:b5:53:d9:e6:c0:37:3d:
         66:1a:c0:aa:ad:1f:9e:c4:0a:f1:eb:d1:00:25:63:6c:b8:15:
         4b:46:22:f9:4b:f4:cc:04:f1:1d:53:b2:70:71:44:fa:61:20:
         f2:75:c0:40:0c:a0:88:0b:dd:de:a4:d4:93:c4:d6:f9:5e:e6:
         8c:d2:ac:19:48:b4:80:8d:83:57:09:74:de:eb:df:71:a4:43:
         67:43:0e:d7:b4:f0:03:95:86:4c:db:3c:11:7b:d3:52:f1:b2:
         b2:02:9b:81:cd:14:63:96:28:93:da:9e:6f:82:8d:0e:75:73:
         11:41:62:6d:ed:3c:56:26:41:8a:32:72:4e:24:55:52:d2:ed:
         83:89:e1:5d:dc:04:5b:bf:95:ea:c1:b7:7d:2d:e4:50:f1:99:
         83:f8:e0:b3:db:d3:6a:1a:8a:90:ce:2a:b1:e2:0b:9e:be:4c:
         04:41:8a:ef:63:d9:7d:10:a5:e5:49:7b:3f:a0:d0:47:34:3a:
         7e:0c:b9:ed:ed:87:41:be:ec:a6:6f:17:d1:b1:d5:e7:20:14:
         3a:33:66:fe:f5:c7:e0:39:33:e8:24:f6:d4:76:74:00:26:b9:
         09:02:97:6d:63:f1:f1:74:4e:09:17:3f:8f:cf:f8:ae:7e:a7:
         c7:32:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----