Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Q9OeUf066JNQ1GkrhnBd3vA6YKk.roa
File:                     Q9OeUf066JNQ1GkrhnBd3vA6YKk.roa (raw, json)
Hash identifier:          m/T3sdTYATmPjuOsf8xlByySQ33PUgglgCaAE0FT0zo=
Subject key identifier:   43:D3:9E:51:FD:3A:E8:93:50:D4:69:2B:86:70:5D:DE:F0:3A:60:A9
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       147B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Q9OeUf066JNQ1GkrhnBd3vA6YKk.roa
Signing time:             Mon 10 Feb 2025 14:34:57 +0000
ROA not before:           Mon 10 Feb 2025 14:34:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131660
IP address blocks:        2001:b000:594::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5243 (0x147b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:34:57 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=43D39E51FD3AE89350D4692B86705DDEF03A60A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:36:5d:46:e6:79:a6:10:9b:07:19:bb:37:
                    f0:74:e8:65:d5:b7:b5:a4:f8:9f:96:30:34:63:a3:
                    57:23:3b:3e:dd:12:f0:75:d0:b6:96:f9:8d:3c:04:
                    e5:cd:4e:ab:c9:c0:db:8d:f0:08:4a:ff:bb:7c:a7:
                    8f:df:19:15:96:de:8a:a6:4b:fd:b6:b2:a5:8a:44:
                    25:73:75:6c:5e:d2:d1:4f:6c:e9:4d:41:eb:c4:a0:
                    00:74:16:f0:22:c0:6a:1e:a9:e1:e9:98:5d:c9:64:
                    f9:0b:35:77:5b:cc:e4:a9:81:5d:f1:43:1b:d2:c7:
                    46:02:53:a8:bc:a2:b2:09:cc:d8:07:f8:55:63:33:
                    ad:e5:81:75:9d:4e:03:9e:9f:78:eb:f3:60:f8:05:
                    a5:65:b0:1d:5b:ca:21:fc:e7:18:d1:72:a8:70:be:
                    f2:65:f6:5e:14:fc:0a:a3:e8:dd:b7:99:b1:f6:31:
                    32:08:4e:d4:6d:21:fc:6c:d9:57:a7:83:c7:02:3b:
                    32:68:45:99:a3:12:90:9c:d5:5c:f3:01:a5:75:33:
                    1d:dc:34:f1:42:e8:15:44:3f:2c:af:3e:96:78:40:
                    51:73:56:14:1f:35:00:8f:63:a2:54:1c:1c:a3:d5:
                    c7:40:8a:84:55:91:41:6a:b2:3f:75:74:25:e9:bc:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:9E:51:FD:3A:E8:93:50:D4:69:2B:86:70:5D:DE:F0:3A:60:A9
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Q9OeUf066JNQ1GkrhnBd3vA6YKk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:594::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:2a:f9:82:5a:dc:c7:5c:67:1a:cd:39:5d:75:29:e1:e4:
         9e:19:a4:43:3c:f5:01:d3:84:d0:fb:19:e0:5c:f7:8e:75:dc:
         5d:06:2e:a2:4e:80:69:23:47:ad:49:5d:95:44:29:5b:3a:83:
         3d:53:79:fc:8a:84:9c:62:b3:64:a2:05:66:d3:17:54:10:b9:
         32:18:cc:de:9d:91:0a:c1:57:fb:9e:7e:74:3b:5f:0c:fd:3d:
         82:74:94:1c:14:c0:f9:62:b2:e4:c9:a9:db:4b:cd:3c:5a:af:
         d0:f4:80:6d:ce:b8:3d:8d:11:ab:59:28:61:1b:1d:cd:b1:42:
         90:20:dd:7a:08:e0:15:b7:44:04:f1:07:92:80:9f:b2:39:5e:
         b0:fb:8c:8a:56:1a:5d:4e:ad:a3:f5:48:45:57:9a:0f:fa:7e:
         64:7e:2a:cb:6c:48:73:12:c0:49:c7:66:45:0f:05:db:8f:fb:
         b7:d9:8a:2b:43:68:b4:8e:fa:ef:35:95:78:b5:98:db:ec:66:
         4f:7c:0d:38:42:58:78:1d:af:e6:1e:e4:2c:b1:99:55:f8:bf:
         ee:52:15:b9:1a:be:31:49:7b:8f:97:76:65:72:fa:91:88:ad:
         40:18:78:c3:49:cd:75:f0:04:fc:67:1b:15:f9:80:c4:6b:78:
         7c:c0:6a:d9
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzRDM5RTUxRkQzQUU4
OTM1MEQ0NjkyQjg2NzA1RERFRjAzQTYwQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoFTZdRuZ5phCbBxm7N/B06GXVt7Wk+J+WMDRjo1cjOz7dEvB1
0LaW+Y08BOXNTqvJwNuN8AhK/7t8p4/fGRWW3oqmS/22sqWKRCVzdWxe0tFPbOlN
QevEoAB0FvAiwGoeqeHpmF3JZPkLNXdbzOSpgV3xQxvSx0YCU6i8orIJzNgH+FVj
M63lgXWdTgOen3jr82D4BaVlsB1byiH85xjRcqhwvvJl9l4U/Aqj6N23mbH2MTII
TtRtIfxs2Veng8cCOzJoRZmjEpCc1VzzAaV1Mx3cNPFC6BVEPyyvPpZ4QFFzVhQf
NQCPY6JUHByj1cdAioRVkUFqsj91dCXpvHypAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUQ9OeUf066JNQ1GkrhnBd3vA6YKkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ROU9lVWYwNjZKTlExR2tyaG5C
ZDN2QTZZS2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
AAWUMA0GCSqGSIb3DQEBCwUAA4IBAQAjDir5glrcx1xnGs05XXUp4eSeGaRDPPUB
04TQ+xngXPeOddxdBi6iToBpI0etSV2VRClbOoM9U3n8ioScYrNkogVm0xdUELky
GMzenZEKwVf7nn50O18M/T2CdJQcFMD5YrLkyanbS808Wq/Q9IBtzrg9jRGrWShh
Gx3NsUKQIN16COAVt0QE8QeSgJ+yOV6w+4yKVhpdTq2j9UhFV5oP+n5kfirLbEhz
EsBJx2ZFDwXbj/u32YorQ2i0jvrvNZV4tZjb7GZPfA04Qlh4Ha/mHuQssZlV+L/u
UhW5Gr4xSXuPl3ZlcvqRiK1AGHjDSc118AT8ZxsV+YDEa3h8wGrZ
-----END CERTIFICATE-----