Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9xOxVbPHWf8GDW_5BDJYF6JV6hg.roa
File:                     9xOxVbPHWf8GDW_5BDJYF6JV6hg.roa (raw, json)
Hash identifier:          +yEZ69cYTUdG1PiKjE7EF5DMUJtalTo+E1oU4RLzNhY=
Subject key identifier:   F7:13:B1:55:B3:C7:59:FF:06:0D:6F:F9:04:32:58:17:A2:55:EA:18
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14B8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9xOxVbPHWf8GDW_5BDJYF6JV6hg.roa
Signing time:             Mon 10 Feb 2025 14:35:13 +0000
ROA not before:           Mon 10 Feb 2025 14:35:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     54994
IP address blocks:        203.74.117.128/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5304 (0x14b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:13 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F713B155B3C759FF060D6FF904325817A255EA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:b6:d0:22:59:c3:0d:08:6f:97:9a:df:b6:
                    b1:f0:be:b8:5a:c1:1b:69:33:35:7a:6a:a6:e0:20:
                    be:b6:71:d5:fe:4d:76:18:8c:c7:a3:3b:37:41:8d:
                    0b:5f:40:19:82:3e:36:e3:0f:fc:a9:1e:55:1e:93:
                    2d:29:72:a4:aa:07:c8:79:8b:e7:21:86:9b:af:be:
                    59:7d:8f:ff:ca:65:30:56:97:15:eb:44:4b:f7:b5:
                    61:cd:b4:e0:c1:55:a0:c2:4c:db:0d:40:7b:43:8c:
                    38:5d:cd:49:e9:f6:e5:b2:04:31:2b:a8:e3:d7:9c:
                    01:6e:c3:c7:00:89:9c:bd:65:34:0d:8c:ef:f6:b7:
                    b3:ac:be:ce:60:78:d6:ff:6c:5f:a8:92:a5:f4:19:
                    75:67:92:63:4e:9c:e7:08:05:a7:1b:57:8e:d0:84:
                    70:0c:e7:6c:72:38:93:b3:99:80:8f:07:63:55:f4:
                    c3:0b:ae:77:0d:b9:24:be:d0:1f:70:f2:84:37:da:
                    53:14:b7:78:53:2c:18:0e:dc:2c:de:e3:59:3b:4b:
                    38:9b:0f:2b:1c:e0:74:d4:01:b8:13:f7:13:d0:62:
                    fe:6d:a2:74:9d:8e:f7:60:17:d8:d6:b8:5d:46:d5:
                    67:e9:f8:35:aa:be:3f:5b:21:37:30:32:bd:18:a8:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:B1:55:B3:C7:59:FF:06:0D:6F:F9:04:32:58:17:A2:55:EA:18
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9xOxVbPHWf8GDW_5BDJYF6JV6hg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.74.117.128/27

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:3f:8c:f0:71:60:62:ba:c1:90:47:40:a5:16:6c:c6:fd:
         2d:80:03:28:7a:b5:1b:b7:d5:8f:95:16:96:dc:09:68:4a:94:
         a0:79:5c:6f:4b:22:9a:39:9f:ba:e0:ff:31:c5:74:73:51:ce:
         52:4c:fc:3e:33:ae:ee:d6:0c:f0:2b:03:59:ae:4d:4b:15:ae:
         87:e0:9a:5f:db:f8:92:14:c9:59:a2:0e:4e:e2:9b:ac:e7:82:
         9c:16:37:e6:14:0d:a8:59:c5:5a:3b:9c:e7:c4:a2:7b:4c:85:
         0a:5f:88:43:63:bc:41:5a:34:dc:89:23:12:2e:65:f7:8a:a2:
         19:aa:7c:71:7e:45:db:66:31:2b:0b:81:06:21:4b:5d:29:72:
         0a:9f:e5:38:4d:0d:cd:30:d1:e0:14:ab:fa:8a:36:ab:f5:ea:
         ba:d5:11:0f:00:2e:e2:21:42:d9:19:5a:dc:a8:42:36:65:84:
         92:3f:02:7d:e8:60:b5:ef:c9:27:9a:67:7c:3d:e5:d1:66:99:
         f5:a8:40:f4:15:11:c2:2c:3c:df:31:b6:3e:76:69:31:41:fa:
         79:a9:cc:9f:93:91:7b:4c:9c:49:bf:33:16:75:79:fe:25:7c:
         dd:9d:8d:ed:d6:00:c6:6a:db:12:99:fb:7f:97:1a:bf:b8:29:
         d6:49:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----