Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa
File:                     w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa (raw, json)
Hash identifier:          QYwPy/H598La7J5MB1HqoJS0u7dDO+OJwY1gvU8qT5A=
Subject key identifier:   C3:5D:17:CE:6D:D0:9D:3D:1A:8C:C2:C3:98:13:84:22:89:CD:F1:1A
Certificate issuer:       /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial:       0317
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa
Signing time:             Fri 22 Aug 2025 09:01:33 +0000
ROA not before:           Fri 22 Aug 2025 09:01:33 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     131657
IP address blocks:        2400:c9a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
        Validity
            Not Before: Aug 22 09:01:33 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C35D17CE6DD09D3D1A8CC2C39813842289CDF11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:19:e9:49:26:8c:0e:63:50:35:b3:a7:65:
                    78:c7:fd:1c:85:4f:45:cf:d2:cf:bd:8f:42:cd:ce:
                    ae:2a:a8:dd:f5:5c:82:d3:b4:bc:09:8b:30:97:c0:
                    a7:94:f0:9f:20:0c:ea:d3:e7:87:bc:9b:54:96:75:
                    45:67:6e:75:dc:27:aa:ad:73:47:46:32:31:fe:15:
                    0f:6c:18:af:7a:6d:3f:5b:66:a5:4a:eb:1d:3a:0f:
                    91:2a:65:9c:03:f1:78:15:2b:33:87:3b:b9:df:50:
                    ce:f2:fc:cf:8c:4b:62:22:95:df:25:d1:5d:df:34:
                    1d:e0:d3:e4:12:dd:4b:f7:62:d0:5f:90:aa:dc:57:
                    cb:a7:f9:d3:0a:de:e5:99:e7:16:37:80:82:6e:e7:
                    86:69:af:37:f3:71:0d:cc:fe:9a:7d:b8:3c:d3:d4:
                    f1:3c:7c:5d:03:d3:09:9c:ac:9b:67:bc:73:41:63:
                    b4:06:d1:39:7e:6f:d5:f3:e0:00:52:7f:70:e6:dc:
                    5f:16:78:52:02:31:1f:7e:4a:0b:b1:4e:0b:02:6a:
                    68:3b:f5:50:5c:c7:0a:36:66:25:13:25:cf:5a:ab:
                    7f:8d:01:78:6d:54:bf:0b:fc:5e:7a:e5:14:1d:ff:
                    30:8a:fb:ee:8e:54:a6:cc:13:b2:71:a4:4f:82:3e:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:17:CE:6D:D0:9D:3D:1A:8C:C2:C3:98:13:84:22:89:CD:F1:1A
            X509v3 Authority Key Identifier:
                keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:52:63:5e:1e:64:a2:24:ba:61:ae:3c:a5:c6:9d:49:b7:8d:
         28:9b:9e:dc:32:d3:62:17:39:ee:8b:7b:5c:9e:c6:f8:45:b1:
         b5:f3:c3:a4:12:80:76:0b:42:26:00:1c:62:68:73:71:ce:92:
         4b:57:f3:fc:14:1b:bd:7d:45:6a:85:ba:ad:ca:07:30:73:0f:
         fd:60:49:d8:3d:e4:78:37:18:74:ad:d9:7b:f6:8c:ec:94:be:
         48:a1:04:75:fe:4e:ce:67:ed:3f:9d:3c:76:c1:ec:c4:6a:1e:
         05:ba:cb:26:09:d8:72:e9:be:78:e9:fa:f0:01:32:af:c6:cb:
         77:1b:21:b8:9a:bf:d1:d3:c7:42:d8:57:01:f5:b8:e6:a2:72:
         3c:ad:03:8e:34:de:92:7a:70:2a:77:d1:29:dc:5a:ad:e5:65:
         a0:69:56:db:41:03:b7:58:e1:57:d6:31:2f:36:3a:6a:3b:2e:
         3e:19:70:2b:38:96:fb:82:02:69:f9:8c:d9:82:a6:18:60:47:
         8c:15:0b:3c:8c:f9:2d:6d:8e:74:34:eb:00:a9:ca:b8:b4:26:
         1e:87:fa:61:cc:d2:88:9a:75:bf:54:c5:20:44:4a:64:f7:e5:
         7e:b4:cb:33:69:b1:37:9f:ff:30:d9:93:00:98:a5:74:5b:5e:
         84:37:54:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----