DNSSEC Debugger - ly.gov.tw

Domain Name:

Time: 2024-05-12 20:48:46 UTC

Analyzing DNSSEC problems for ly.gov.tw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 43837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for ly.gov.tw/A
	Received 875 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 875 octets ;; HEADER SECTION ;; id = 36860 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) tw. 172800 IN NS a.dns.tw. tw. 172800 IN NS b.dns.tw. tw. 172800 IN NS c.dns.tw. tw. 172800 IN NS d.dns.tw. tw. 172800 IN NS e.dns.tw. tw. 172800 IN NS f.dns.tw. tw. 172800 IN NS g.dns.tw. tw. 172800 IN NS h.dns.tw. tw. 172800 IN NS anytld.apnic.net. tw. 86400 IN DS ( 51277 8 2 462da9af501d2b1eef6725522db5972f8cd2490b51d92088ff1e3d2de0ec7bcd ) tw. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a4z7Lbq+U1deZzJLeyhxqhJ6X9ziw1Akb2mVPofkOBbxg0mkBL60aZsrw7sdzqBdGs8ileVmkKzx j1A5hkg2fbiS0qUci1Yn1yvYcUShF5mz8nJw/iX+wAYmrsYsBNJFWsDCscB9bfaNks0AVrPwESri bpdoTEwEYZo0XZjLOdOwwAd+bP19tq3ImSffh0ZEjQLECAPOY5PCv7cF296PP5KwjKHoFE4QgTtT hLs6MDv9M/ceksx7kkkjlN2L0ZzALk0Y8k78c0OecoNpttAuISbBm7QaYmfV2uSe2mo6Ej5uCjq0 pelKGpFQ+7KFruh0amZzU3HvdrAKCc1/2cG8AQ== ) ;; ADDITIONAL SECTION (17 records) a.dns.tw. 172800 IN A 203.73.24.25 b.dns.tw. 172800 IN A 210.201.138.58 c.dns.tw. 172800 IN A 203.66.87.201 d.dns.tw. 172800 IN A 60.199.165.186 e.dns.tw. 172800 IN A 211.20.231.11 f.dns.tw. 172800 IN A 182.173.0.10 g.dns.tw. 172800 IN A 34.141.111.176 h.dns.tw. 172800 IN A 204.61.216.119 anytld.apnic.net. 172800 IN A 202.12.31.53 a.dns.tw. 172800 IN AAAA 2001:45b1:0:5::25 b.dns.tw. 172800 IN AAAA 2404:0:10a0::58 c.dns.tw. 172800 IN AAAA 2001:b020:0:77::1 d.dns.tw. 172800 IN AAAA 2001:4541:9010:7::186 e.dns.tw. 172800 IN AAAA 2001:b000:1e0:c000::11 h.dns.tw. 172800 IN AAAA 2001:500:14:6119:ad::1 anytld.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for tw/DNSKEY
	Received 868 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 868 octets ;; HEADER SECTION ;; id = 45949 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) tw. 172800 IN NS a.dns.tw. tw. 172800 IN NS b.dns.tw. tw. 172800 IN NS c.dns.tw. tw. 172800 IN NS d.dns.tw. tw. 172800 IN NS e.dns.tw. tw. 172800 IN NS f.dns.tw. tw. 172800 IN NS g.dns.tw. tw. 172800 IN NS h.dns.tw. tw. 172800 IN NS anytld.apnic.net. tw. 86400 IN DS ( 51277 8 2 462da9af501d2b1eef6725522db5972f8cd2490b51d92088ff1e3d2de0ec7bcd ) tw. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a4z7Lbq+U1deZzJLeyhxqhJ6X9ziw1Akb2mVPofkOBbxg0mkBL60aZsrw7sdzqBdGs8ileVmkKzx j1A5hkg2fbiS0qUci1Yn1yvYcUShF5mz8nJw/iX+wAYmrsYsBNJFWsDCscB9bfaNks0AVrPwESri bpdoTEwEYZo0XZjLOdOwwAd+bP19tq3ImSffh0ZEjQLECAPOY5PCv7cF296PP5KwjKHoFE4QgTtT hLs6MDv9M/ceksx7kkkjlN2L0ZzALk0Y8k78c0OecoNpttAuISbBm7QaYmfV2uSe2mo6Ej5uCjq0 pelKGpFQ+7KFruh0amZzU3HvdrAKCc1/2cG8AQ== ) ;; ADDITIONAL SECTION (17 records) a.dns.tw. 172800 IN A 203.73.24.25 b.dns.tw. 172800 IN A 210.201.138.58 c.dns.tw. 172800 IN A 203.66.87.201 d.dns.tw. 172800 IN A 60.199.165.186 e.dns.tw. 172800 IN A 211.20.231.11 f.dns.tw. 172800 IN A 182.173.0.10 g.dns.tw. 172800 IN A 34.141.111.176 h.dns.tw. 172800 IN A 204.61.216.119 anytld.apnic.net. 172800 IN A 202.12.31.53 a.dns.tw. 172800 IN AAAA 2001:45b1:0:5::25 b.dns.tw. 172800 IN AAAA 2404:0:10a0::58 c.dns.tw. 172800 IN AAAA 2001:b020:0:77::1 d.dns.tw. 172800 IN AAAA 2001:4541:9010:7::186 e.dns.tw. 172800 IN AAAA 2001:b000:1e0:c000::11 h.dns.tw. 172800 IN AAAA 2001:500:14:6119:ad::1 anytld.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; { "EDNS-VERSION": 0 }
	Found child zone tw

	Checking DS between . and tw
	Query to l.root-servers.net for tw/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 55199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tw. IN DS ;; ANSWER SECTION (2 records) tw. 86400 IN DS ( 51277 8 2 462da9af501d2b1eef6725522db5972f8cd2490b51d92088ff1e3d2de0ec7bcd ) tw. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a4z7Lbq+U1deZzJLeyhxqhJ6X9ziw1Akb2mVPofkOBbxg0mkBL60aZsrw7sdzqBdGs8ileVmkKzx j1A5hkg2fbiS0qUci1Yn1yvYcUShF5mz8nJw/iX+wAYmrsYsBNJFWsDCscB9bfaNks0AVrPwESri bpdoTEwEYZo0XZjLOdOwwAd+bP19tq3ImSffh0ZEjQLECAPOY5PCv7cF296PP5KwjKHoFE4QgTtT hLs6MDv9M/ceksx7kkkjlN2L0ZzALk0Y8k78c0OecoNpttAuISbBm7QaYmfV2uSe2mo6Ej5uCjq0 pelKGpFQ+7KFruh0amZzU3HvdrAKCc1/2cG8AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tw in the . zone
	DS=51277/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`tw. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a4z7Lbq+U1deZzJLeyhxqhJ6X9ziw1Akb2mVPofkOBbxg0mkBL60aZsrw7sdzqBdGs8ileVmkKzx j1A5hkg2fbiS0qUci1Yn1yvYcUShF5mz8nJw/iX+wAYmrsYsBNJFWsDCscB9bfaNks0AVrPwESri bpdoTEwEYZo0XZjLOdOwwAd+bP19tq3ImSffh0ZEjQLECAPOY5PCv7cF296PP5KwjKHoFE4QgTtT hLs6MDv9M/ceksx7kkkjlN2L0ZzALk0Y8k78c0OecoNpttAuISbBm7QaYmfV2uSe2mo6Ej5uCjq0 pelKGpFQ+7KFruh0amZzU3HvdrAKCc1/2cG8AQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=51277/SHA-256 is now in the chain-of-trust
	`tw. 86400 IN DS ( 51277 8 2 462da9af501d2b1eef6725522db5972f8cd2490b51d92088ff1e3d2de0ec7bcd )`
	Query to a.dns.tw for tw/DNSKEY
	Received 907 bytes from 203.73.24.25
	;; Response received from [203.73.24.25] 907 octets ;; HEADER SECTION ;; id = 25975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tw. IN DNSKEY ;; ANSWER SECTION (4 records) tw. 900 IN DNSKEY ( 257 3 8 AwEAAbEzQHIFBqlFNZnwOMpP4BrIUC6kXG+hxQRa4ZhVkqpwRvCAmjaWdzK8bl/e7q/7nly+AuUx P3Vus8OXY6UGEwrHPgRm54Sgq0FtxIM5MrqQveHFSOvL96KYVGeZEPEbRoSPIgdYvsLOR1L5nwcA YBI72zVUH3bJ47kMbLvZXsp01BkP+b2sGyYkUYGTiMDT4cQBieO6s4mUzCCfdQBj/JkjQyo9ExWj V2DrTRWQ3MhHoA7seAIHeviPjkox1XVwwriunm2syTvAOgi95RX1mFfFHcPiNTzXKmvioFCQOhTE CnABeYJQhFsaZ6YGZlCh+lviBM5/wpf/vCX3/GCK/j8= ) ; Key ID = 51277 tw. 900 IN DNSKEY ( 256 3 8 AwEAAZGUVv/A6vZSqj1w8MWH68BettSNQFjGMZnApMcUUPkx59e3/fD4oTcZU2mykpdZ8jRF2KCH rP6TkqjGkyOAbl+596O1zwhEL3qK7BwLewwRkihl4hLf2wiCxp2ZkHTMpDyKi+gLG9ActSpCYusw C0K60CHcRYCXLK74Ka8IDa6B ) ; Key ID = 17859 tw. 900 IN RRSIG ( DNSKEY 8 1 900 20240611170047 20240512170047 17859 tw. OkLsu7CL0UeVOSpVgM7SWFUlGqxYTq4uF2gCPVwNoEbLNraf8afec+NoWVK/rU/eX5ofOfVPTc+G w6Ot4QJFmbkEIyMy3zBobVQehEDkzeJ81iWIm0g+7lSPcVHo1hzmpC2JnAGVMBstpIiZyk8TmaNG Wv/Re/vEYiL/rtQG0oE= ) tw. 900 IN RRSIG ( DNSKEY 8 1 900 20240611170047 20240512170047 51277 tw. P/f48S+HC3Kox1474bOOB9Caku+lAHzvBUHcLz6IRaSt8TDA8DNH2RiXKSwj5aG5FFEOT9r4ziVO qJ4cfClEr0YFaRu+4Qw+j4QKLC0vm8/5FcE+CnJ5W5MZzG+ehlmFyafCun0FG+he7Xo6uOeJ9U4C S5h5Woo24pLPYA3/SJLOrZaRqe7uxmTUNYDfJR4M/CGXeQ3peV4VUESshfygfaDJahX8t42su+qg vcObCasbpS53E9pCCVuJOsUytQ8FEV0jiKvxenzClv8qduTPMYj/XdtU70Nx0dkk+sjtSOm7+IOf okarvrl3p0BVPzn2d41rTXYup+hGsR+y3LgqiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for tw
	`tw. 900 IN DNSKEY ( 257 3 8 AwEAAbEzQHIFBqlFNZnwOMpP4BrIUC6kXG+hxQRa4ZhVkqpwRvCAmjaWdzK8bl/e7q/7nly+AuUx P3Vus8OXY6UGEwrHPgRm54Sgq0FtxIM5MrqQveHFSOvL96KYVGeZEPEbRoSPIgdYvsLOR1L5nwcA YBI72zVUH3bJ47kMbLvZXsp01BkP+b2sGyYkUYGTiMDT4cQBieO6s4mUzCCfdQBj/JkjQyo9ExWj V2DrTRWQ3MhHoA7seAIHeviPjkox1XVwwriunm2syTvAOgi95RX1mFfFHcPiNTzXKmvioFCQOhTE CnABeYJQhFsaZ6YGZlCh+lviBM5/wpf/vCX3/GCK/j8= ) ; Key ID = 51277`
	`tw. 900 IN DNSKEY ( 256 3 8 AwEAAZGUVv/A6vZSqj1w8MWH68BettSNQFjGMZnApMcUUPkx59e3/fD4oTcZU2mykpdZ8jRF2KCH rP6TkqjGkyOAbl+596O1zwhEL3qK7BwLewwRkihl4hLf2wiCxp2ZkHTMpDyKi+gLG9ActSpCYusw C0K60CHcRYCXLK74Ka8IDa6B ) ; Key ID = 17859`
	DNSKEY=51277/SEP is now in the chain-of-trust
	DS=51277/SHA-256 verifies DNSKEY=51277/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`tw. 900 IN RRSIG ( DNSKEY 8 1 900 20240611170047 20240512170047 17859 tw. OkLsu7CL0UeVOSpVgM7SWFUlGqxYTq4uF2gCPVwNoEbLNraf8afec+NoWVK/rU/eX5ofOfVPTc+G w6Ot4QJFmbkEIyMy3zBobVQehEDkzeJ81iWIm0g+7lSPcVHo1hzmpC2JnAGVMBstpIiZyk8TmaNG Wv/Re/vEYiL/rtQG0oE= )`
	`tw. 900 IN RRSIG ( DNSKEY 8 1 900 20240611170047 20240512170047 51277 tw. P/f48S+HC3Kox1474bOOB9Caku+lAHzvBUHcLz6IRaSt8TDA8DNH2RiXKSwj5aG5FFEOT9r4ziVO qJ4cfClEr0YFaRu+4Qw+j4QKLC0vm8/5FcE+CnJ5W5MZzG+ehlmFyafCun0FG+he7Xo6uOeJ9U4C S5h5Woo24pLPYA3/SJLOrZaRqe7uxmTUNYDfJR4M/CGXeQ3peV4VUESshfygfaDJahX8t42su+qg vcObCasbpS53E9pCCVuJOsUytQ8FEV0jiKvxenzClv8qduTPMYj/XdtU70Nx0dkk+sjtSOm7+IOf okarvrl3p0BVPzn2d41rTXYup+hGsR+y3LgqiQ== )`
	RRSIG=17859 and DNSKEY=17859 verifies the DNSKEY RRset
	RRSIG=51277 and DNSKEY=51277/SEP verifies the DNSKEY RRset
	DNSKEY=17859 is now in the chain-of-trust
	Query to anytld.apnic.net for ly.gov.tw/A
	Received 812 bytes from 202.12.31.53
	;; Response received from [202.12.31.53] 812 octets ;; HEADER SECTION ;; id = 53034 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 20 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) gov.tw. 3600 IN NS a.twnic.net.tw. gov.tw. 3600 IN NS d.twnic.net.tw. gov.tw. 3600 IN NS g.twnic.net.tw. gov.tw. 3600 IN NS e.twnic.net.tw. gov.tw. 3600 IN NS b.twnic.net.tw. gov.tw. 3600 IN NS c.twnic.net.tw. gov.tw. 3600 IN NS f.twnic.net.tw. gov.tw. 3600 IN NS h.twnic.net.tw. gov.tw. 300 IN DS ( 514 8 2 7e64cf4d65f33705a364b376a43c6e62eb6da3134c5207e0f1a79bd6af101991 ) gov.tw. 300 IN DS ( 19435 8 2 a0ae38409903053b948e6504b7e9c904a139952bae9979841945248d04b93ccc ) gov.tw. 300 IN RRSIG ( DS 8 2 300 20240611170047 20240512170047 17859 tw. RiVLLk8ttffM6M0XrmobPf6a97WgM4csjOwwWJqdE2DO9eLPf8EKu7X2rLlzh2gaw1SlBIByb0Ef bczaZM8EhjaBpsuUNUaXC8paf0b8jr0AEek9w5z9TJwdJYkfuIbnm+5vlQfve7+5ZrmLYjDE9IKQ x+GpMeKbMoFxBOJ4j4c= ) ;; ADDITIONAL SECTION (20 records) h.twnic.net.tw. 3600 IN A 220.229.225.196 g.twnic.net.tw. 3600 IN A 60.199.165.184 g.twnic.net.tw. 3600 IN A 182.173.0.1 f.twnic.net.tw. 3600 IN A 203.66.87.200 e.twnic.net.tw. 3600 IN A 211.20.231.7 e.twnic.net.tw. 3600 IN A 211.20.231.12 d.twnic.net.tw. 3600 IN A 60.199.165.187 d.twnic.net.tw. 3600 IN A 202.169.175.130 c.twnic.net.tw. 3600 IN A 168.95.192.10 b.twnic.net.tw. 3600 IN A 103.235.88.1 b.twnic.net.tw. 3600 IN A 203.73.24.24 a.twnic.net.tw. 3600 IN A 130.211.241.105 a.twnic.net.tw. 3600 IN A 211.73.64.22 h.twnic.net.tw. 3600 IN AAAA 2001:cd8:400::196 g.twnic.net.tw. 3600 IN AAAA 2001:4541:9010:7::184 e.twnic.net.tw. 3600 IN AAAA 2001:b000:1e0:c000::12 d.twnic.net.tw. 3600 IN AAAA 2001:c08:175:128::175:128 d.twnic.net.tw. 3600 IN AAAA 2001:4541:9010:7::187 b.twnic.net.tw. 3600 IN AAAA 2001:45b1:0:5::24 ;; { "EDNS-VERSION": 0 }
	Query to h.dns.tw for gov.tw/DNSKEY
	Received 809 bytes from 204.61.216.119
	;; Response received from [204.61.216.119] 809 octets ;; HEADER SECTION ;; id = 45638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 20 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) gov.tw. 3600 IN NS h.twnic.net.tw. gov.tw. 3600 IN NS e.twnic.net.tw. gov.tw. 3600 IN NS f.twnic.net.tw. gov.tw. 3600 IN NS d.twnic.net.tw. gov.tw. 3600 IN NS a.twnic.net.tw. gov.tw. 3600 IN NS c.twnic.net.tw. gov.tw. 3600 IN NS b.twnic.net.tw. gov.tw. 3600 IN NS g.twnic.net.tw. gov.tw. 300 IN DS ( 514 8 2 7e64cf4d65f33705a364b376a43c6e62eb6da3134c5207e0f1a79bd6af101991 ) gov.tw. 300 IN DS ( 19435 8 2 a0ae38409903053b948e6504b7e9c904a139952bae9979841945248d04b93ccc ) gov.tw. 300 IN RRSIG ( DS 8 2 300 20240611170047 20240512170047 17859 tw. RiVLLk8ttffM6M0XrmobPf6a97WgM4csjOwwWJqdE2DO9eLPf8EKu7X2rLlzh2gaw1SlBIByb0Ef bczaZM8EhjaBpsuUNUaXC8paf0b8jr0AEek9w5z9TJwdJYkfuIbnm+5vlQfve7+5ZrmLYjDE9IKQ x+GpMeKbMoFxBOJ4j4c= ) ;; ADDITIONAL SECTION (20 records) h.twnic.net.tw. 3600 IN A 220.229.225.196 g.twnic.net.tw. 3600 IN A 60.199.165.184 g.twnic.net.tw. 3600 IN A 182.173.0.1 f.twnic.net.tw. 3600 IN A 203.66.87.200 e.twnic.net.tw. 3600 IN A 211.20.231.7 e.twnic.net.tw. 3600 IN A 211.20.231.12 d.twnic.net.tw. 3600 IN A 60.199.165.187 d.twnic.net.tw. 3600 IN A 202.169.175.130 c.twnic.net.tw. 3600 IN A 168.95.192.10 b.twnic.net.tw. 3600 IN A 103.235.88.1 b.twnic.net.tw. 3600 IN A 203.73.24.24 a.twnic.net.tw. 3600 IN A 130.211.241.105 a.twnic.net.tw. 3600 IN A 211.73.64.22 h.twnic.net.tw. 3600 IN AAAA 2001:cd8:400::196 g.twnic.net.tw. 3600 IN AAAA 2001:4541:9010:7::184 e.twnic.net.tw. 3600 IN AAAA 2001:b000:1e0:c000::12 d.twnic.net.tw. 3600 IN AAAA 2001:c08:175:128::175:128 d.twnic.net.tw. 3600 IN AAAA 2001:4541:9010:7::187 b.twnic.net.tw. 3600 IN AAAA 2001:45b1:0:5::24 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.tw

gov.tw

	Checking DS between tw and gov.tw
	Query to h.dns.tw for gov.tw/DS
	Received 293 bytes from 204.61.216.119
	;; Response received from [204.61.216.119] 293 octets ;; HEADER SECTION ;; id = 31612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tw. IN DS ;; ANSWER SECTION (3 records) gov.tw. 300 IN DS ( 514 8 2 7e64cf4d65f33705a364b376a43c6e62eb6da3134c5207e0f1a79bd6af101991 ) gov.tw. 300 IN DS ( 19435 8 2 a0ae38409903053b948e6504b7e9c904a139952bae9979841945248d04b93ccc ) gov.tw. 300 IN RRSIG ( DS 8 2 300 20240611170047 20240512170047 17859 tw. RiVLLk8ttffM6M0XrmobPf6a97WgM4csjOwwWJqdE2DO9eLPf8EKu7X2rLlzh2gaw1SlBIByb0Ef bczaZM8EhjaBpsuUNUaXC8paf0b8jr0AEek9w5z9TJwdJYkfuIbnm+5vlQfve7+5ZrmLYjDE9IKQ x+GpMeKbMoFxBOJ4j4c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for gov.tw in the tw zone
	DS=514/SHA-256 has algorithm RSASHA256
	DS=19435/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov.tw. 300 IN RRSIG ( DS 8 2 300 20240611170047 20240512170047 17859 tw. RiVLLk8ttffM6M0XrmobPf6a97WgM4csjOwwWJqdE2DO9eLPf8EKu7X2rLlzh2gaw1SlBIByb0Ef bczaZM8EhjaBpsuUNUaXC8paf0b8jr0AEek9w5z9TJwdJYkfuIbnm+5vlQfve7+5ZrmLYjDE9IKQ x+GpMeKbMoFxBOJ4j4c= )`
	RRSIG=17859 and DNSKEY=17859 verifies the DS RRset
	DS=514/SHA-256 is now in the chain-of-trust
	DS=19435/SHA-256 is now in the chain-of-trust
	`gov.tw. 300 IN DS ( 514 8 2 7e64cf4d65f33705a364b376a43c6e62eb6da3134c5207e0f1a79bd6af101991 )`
	`gov.tw. 300 IN DS ( 19435 8 2 a0ae38409903053b948e6504b7e9c904a139952bae9979841945248d04b93ccc )`
	Query to f.twnic.net.tw for gov.tw/DNSKEY
	Received 1157 bytes from 203.66.87.200
	;; Response received from [203.66.87.200] 1157 octets ;; HEADER SECTION ;; id = 8886 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.tw. IN DNSKEY ;; ANSWER SECTION (4 records) gov.tw. 86400 IN DNSKEY ( 256 3 8 AwEAAZspTTqrXMnmapqOyveVOoj/PNZ44nhdCgpDBdVVigOrBaohcKV5NotgiSlZxt6uD6uO643y d0eO+j8iVkE8oqHzGbAjgTtALT6fG9N69CBEQWPx+5bcFh+QKe2MNSqlADbQsWHjc8ZiazW9FGm2 GXHhWTMFPFGZB7IGK2FbzxJMNHgQyUlfMRY9IQpOoT9yO6q/uSJ5O/+/fKMTgJM62FHrzJ1ATN75 Zvoj5epwSFEmqMEsaFQ1Q2RTfuX41kucE3Z8kq5B5HPGMypVxwWPqHgGk9pYR5ESTlH6ArAMQwrH cYO6zxrE69wgQP+ib42ENcMEIMN7CAvBnDXgI7uhBhM= ) ; Key ID = 61350 gov.tw. 86400 IN DNSKEY ( 257 3 8 AwEAAav+dtJYCkG+vNIusdlfwFhEWmhkLOD7zPs9UCn9URnQ/xJiMeLtMtf9hrmFN44gfm8XzKdn JQy0+Nbwa2urRjAZYJR/Jdvriq5ZZnJSRC8jfOeHaQft2lD89MNEjPulCu2oAsfXGuRXVjdg9Fmj wFe2oEdeAfb+PjPvF+hyer8P3J0s35zhuSH94Lptm7zJ+2stUisdSJnEpHN31+jhS3bt+JbLH3Mm qBIVzhkWXuI7h1j2ZT9socDrrQ1FE3UEFrabpOCu65xu3YyR1NcKWfjJOsvQVNERocr2W8VGSkbe d/c0HKmkQROGEIz7grnlJIxjSeiMwcrHbZa45c1CU8k= ) ; Key ID = 19435 gov.tw. 86400 IN DNSKEY ( 256 3 8 AwEAAbTmPY0wiP70A9wgHXYCHC4mGu5yHRoP2nS9uJjZUTGBZetthcwzODk90ctbVpUsbBNuyd/u hyLnLafJOHKUopIvH2SMB2DygaY4nZ7eD2QiwxXNlMAQ9jKAZaF38a1bTu30q6Wc7Ihhc0UNp0fZ B5xDRVXVYf0LHfUNeBnL1O4V/gfYNxQBagwS3rbhvXOV1rVaLXksc4Y8x3MMekaQ9V/4eJ/pU09j /ZakNxb0ocSrh0Vad6Yihr5CXmwMEkZ0cR7qNK9Io/pH73wdeTmOXWk4qmDatkqlBWIMhBy5sYgH KmwWOxwkLkOlnaa0lG3ETR/qnuvz3AHEzko147mBzkc= ) ; Key ID = 13941 gov.tw. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240701000000 20240425000000 19435 gov.tw. RG7xYrftzHRzhR4nVmNwiLrjQNshauLzINOwR7awPJntFHd8BIOiV1W9LtGmsgPQ84/4qt/UkN1L cU8BHlwB6ffvheL+eYfGPNTGVZ+KbGpyg0xwWw8IplNcxWmFjIbq8+veXzTgk0Sago+I5SowpDn8 hi2YV+IH7EthF2k0D7NHY7ESNPOxYTpB6CPSM6p0CONB5Do6K+RIKBtLakmGdggX0Cgui5QeT/Wt RnGuJ2BYFp/YrFIdzgTJnJ1bTRrppCeNzo4NsSyu5jSULW2+sW7CTO8As5Hlc1mmtoscaj8WwkDo ix+SHc9/cDaYuGf+IrtLOsovdIACgGiVNax2IA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for gov.tw
	`gov.tw. 86400 IN DNSKEY ( 256 3 8 AwEAAZspTTqrXMnmapqOyveVOoj/PNZ44nhdCgpDBdVVigOrBaohcKV5NotgiSlZxt6uD6uO643y d0eO+j8iVkE8oqHzGbAjgTtALT6fG9N69CBEQWPx+5bcFh+QKe2MNSqlADbQsWHjc8ZiazW9FGm2 GXHhWTMFPFGZB7IGK2FbzxJMNHgQyUlfMRY9IQpOoT9yO6q/uSJ5O/+/fKMTgJM62FHrzJ1ATN75 Zvoj5epwSFEmqMEsaFQ1Q2RTfuX41kucE3Z8kq5B5HPGMypVxwWPqHgGk9pYR5ESTlH6ArAMQwrH cYO6zxrE69wgQP+ib42ENcMEIMN7CAvBnDXgI7uhBhM= ) ; Key ID = 61350`
	`gov.tw. 86400 IN DNSKEY ( 257 3 8 AwEAAav+dtJYCkG+vNIusdlfwFhEWmhkLOD7zPs9UCn9URnQ/xJiMeLtMtf9hrmFN44gfm8XzKdn JQy0+Nbwa2urRjAZYJR/Jdvriq5ZZnJSRC8jfOeHaQft2lD89MNEjPulCu2oAsfXGuRXVjdg9Fmj wFe2oEdeAfb+PjPvF+hyer8P3J0s35zhuSH94Lptm7zJ+2stUisdSJnEpHN31+jhS3bt+JbLH3Mm qBIVzhkWXuI7h1j2ZT9socDrrQ1FE3UEFrabpOCu65xu3YyR1NcKWfjJOsvQVNERocr2W8VGSkbe d/c0HKmkQROGEIz7grnlJIxjSeiMwcrHbZa45c1CU8k= ) ; Key ID = 19435`
	`gov.tw. 86400 IN DNSKEY ( 256 3 8 AwEAAbTmPY0wiP70A9wgHXYCHC4mGu5yHRoP2nS9uJjZUTGBZetthcwzODk90ctbVpUsbBNuyd/u hyLnLafJOHKUopIvH2SMB2DygaY4nZ7eD2QiwxXNlMAQ9jKAZaF38a1bTu30q6Wc7Ihhc0UNp0fZ B5xDRVXVYf0LHfUNeBnL1O4V/gfYNxQBagwS3rbhvXOV1rVaLXksc4Y8x3MMekaQ9V/4eJ/pU09j /ZakNxb0ocSrh0Vad6Yihr5CXmwMEkZ0cR7qNK9Io/pH73wdeTmOXWk4qmDatkqlBWIMhBy5sYgH KmwWOxwkLkOlnaa0lG3ETR/qnuvz3AHEzko147mBzkc= ) ; Key ID = 13941`
	DNSKEY=19435/SEP is now in the chain-of-trust
	DS=19435/SHA-256 verifies DNSKEY=19435/SEP
	DS=514/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`gov.tw. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240701000000 20240425000000 19435 gov.tw. RG7xYrftzHRzhR4nVmNwiLrjQNshauLzINOwR7awPJntFHd8BIOiV1W9LtGmsgPQ84/4qt/UkN1L cU8BHlwB6ffvheL+eYfGPNTGVZ+KbGpyg0xwWw8IplNcxWmFjIbq8+veXzTgk0Sago+I5SowpDn8 hi2YV+IH7EthF2k0D7NHY7ESNPOxYTpB6CPSM6p0CONB5Do6K+RIKBtLakmGdggX0Cgui5QeT/Wt RnGuJ2BYFp/YrFIdzgTJnJ1bTRrppCeNzo4NsSyu5jSULW2+sW7CTO8As5Hlc1mmtoscaj8WwkDo ix+SHc9/cDaYuGf+IrtLOsovdIACgGiVNax2IA== )`
	RRSIG=19435 and DNSKEY=19435/SEP verifies the DNSKEY RRset
	DNSKEY=61350 is now in the chain-of-trust
	DNSKEY=13941 is now in the chain-of-trust
	Query to b.twnic.net.tw for ly.gov.tw/A
	Received 632 bytes from 203.73.24.24
	;; Response received from [203.73.24.24] 632 octets ;; HEADER SECTION ;; id = 10025 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ly.gov.tw. 86400 IN NS dns4.ly.gov.tw. ly.gov.tw. 86400 IN NS dns2.ly.gov.tw. ly.gov.tw. 86400 IN NS dns1.ly.gov.tw. ly.gov.tw. 86400 IN NS dns3.ly.gov.tw. ly.gov.tw. 300 IN DS ( 63679 8 2 5be9df5b6c2ac9236348f53338328ea2b7c6b2cb061535d40c668741bff5abd7 ) ly.gov.tw. 300 IN RRSIG ( DS 8 3 300 20240701000000 20240425000000 13941 gov.tw. EBBbwMbTRmme3K90QzowAV3/ded343tXHLp+L9odR04He+CcS6ai2O7RijGe3P2lqB5Gx7Kp50Ga 8l6j5z9X58KaE5UDYEq3W7eGPP51ukVrEyl59CnOsiH0QihFnixiDO05sCNaXhq05JNq3hQvWVCW KqRe2zLHv8pJyLmSHexw2ZtKGWNbV/eZ+X9ULH00r/ruKnckkvttReHD0erWVLRIYxvVlWCQ84Y2 WVJ9k+3jSpi10PmlsHixqHkb4HD0CuSuAkbIZu/4FZLMtiYRZT0SV0zJpmHdkW5WfT3PJ6JNMRB5 dD6sSnN5+DIHswXzfu2CXXBAdmTgAXHLIZVVzQ== ) ;; ADDITIONAL SECTION (9 records) dns4.ly.gov.tw. 86400 IN A 210.241.74.122 dns3.ly.gov.tw. 86400 IN A 210.241.74.121 dns2.ly.gov.tw. 86400 IN A 210.69.138.122 dns1.ly.gov.tw. 86400 IN A 210.69.138.121 dns4.ly.gov.tw. 86400 IN AAAA 2001:4420:601b:2::ac8:c07a dns3.ly.gov.tw. 86400 IN AAAA 2001:4420:601b:2::ac8:c079 dns2.ly.gov.tw. 86400 IN AAAA 2001:4420:601c:2::c0a8:17a dns1.ly.gov.tw. 86400 IN AAAA 2001:4420:601c:2::c0a8:179 ;; { "EDNS-VERSION": 0 }
	Query to a.twnic.net.tw for ly.gov.tw/DNSKEY
	Received 632 bytes from 211.73.64.22
	;; Response received from [211.73.64.22] 632 octets ;; HEADER SECTION ;; id = 10038 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ly.gov.tw. 86400 IN NS dns3.ly.gov.tw. ly.gov.tw. 86400 IN NS dns2.ly.gov.tw. ly.gov.tw. 86400 IN NS dns1.ly.gov.tw. ly.gov.tw. 86400 IN NS dns4.ly.gov.tw. ly.gov.tw. 300 IN DS ( 63679 8 2 5be9df5b6c2ac9236348f53338328ea2b7c6b2cb061535d40c668741bff5abd7 ) ly.gov.tw. 300 IN RRSIG ( DS 8 3 300 20240701000000 20240425000000 13941 gov.tw. EBBbwMbTRmme3K90QzowAV3/ded343tXHLp+L9odR04He+CcS6ai2O7RijGe3P2lqB5Gx7Kp50Ga 8l6j5z9X58KaE5UDYEq3W7eGPP51ukVrEyl59CnOsiH0QihFnixiDO05sCNaXhq05JNq3hQvWVCW KqRe2zLHv8pJyLmSHexw2ZtKGWNbV/eZ+X9ULH00r/ruKnckkvttReHD0erWVLRIYxvVlWCQ84Y2 WVJ9k+3jSpi10PmlsHixqHkb4HD0CuSuAkbIZu/4FZLMtiYRZT0SV0zJpmHdkW5WfT3PJ6JNMRB5 dD6sSnN5+DIHswXzfu2CXXBAdmTgAXHLIZVVzQ== ) ;; ADDITIONAL SECTION (9 records) dns4.ly.gov.tw. 86400 IN A 210.241.74.122 dns3.ly.gov.tw. 86400 IN A 210.241.74.121 dns2.ly.gov.tw. 86400 IN A 210.69.138.122 dns1.ly.gov.tw. 86400 IN A 210.69.138.121 dns4.ly.gov.tw. 86400 IN AAAA 2001:4420:601b:2::ac8:c07a dns3.ly.gov.tw. 86400 IN AAAA 2001:4420:601b:2::ac8:c079 dns2.ly.gov.tw. 86400 IN AAAA 2001:4420:601c:2::c0a8:17a dns1.ly.gov.tw. 86400 IN AAAA 2001:4420:601c:2::c0a8:179 ;; { "EDNS-VERSION": 0 }
	Found child zone ly.gov.tw

ly.gov.tw

	Checking DS between gov.tw and ly.gov.tw
	Query to a.twnic.net.tw for ly.gov.tw/DS
	Received 380 bytes from 211.73.64.22
	;; Response received from [211.73.64.22] 380 octets ;; HEADER SECTION ;; id = 9696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN DS ;; ANSWER SECTION (2 records) ly.gov.tw. 300 IN DS ( 63679 8 2 5be9df5b6c2ac9236348f53338328ea2b7c6b2cb061535d40c668741bff5abd7 ) ly.gov.tw. 300 IN RRSIG ( DS 8 3 300 20240701000000 20240425000000 13941 gov.tw. EBBbwMbTRmme3K90QzowAV3/ded343tXHLp+L9odR04He+CcS6ai2O7RijGe3P2lqB5Gx7Kp50Ga 8l6j5z9X58KaE5UDYEq3W7eGPP51ukVrEyl59CnOsiH0QihFnixiDO05sCNaXhq05JNq3hQvWVCW KqRe2zLHv8pJyLmSHexw2ZtKGWNbV/eZ+X9ULH00r/ruKnckkvttReHD0erWVLRIYxvVlWCQ84Y2 WVJ9k+3jSpi10PmlsHixqHkb4HD0CuSuAkbIZu/4FZLMtiYRZT0SV0zJpmHdkW5WfT3PJ6JNMRB5 dD6sSnN5+DIHswXzfu2CXXBAdmTgAXHLIZVVzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ly.gov.tw in the gov.tw zone
	DS=63679/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ly.gov.tw. 300 IN RRSIG ( DS 8 3 300 20240701000000 20240425000000 13941 gov.tw. EBBbwMbTRmme3K90QzowAV3/ded343tXHLp+L9odR04He+CcS6ai2O7RijGe3P2lqB5Gx7Kp50Ga 8l6j5z9X58KaE5UDYEq3W7eGPP51ukVrEyl59CnOsiH0QihFnixiDO05sCNaXhq05JNq3hQvWVCW KqRe2zLHv8pJyLmSHexw2ZtKGWNbV/eZ+X9ULH00r/ruKnckkvttReHD0erWVLRIYxvVlWCQ84Y2 WVJ9k+3jSpi10PmlsHixqHkb4HD0CuSuAkbIZu/4FZLMtiYRZT0SV0zJpmHdkW5WfT3PJ6JNMRB5 dD6sSnN5+DIHswXzfu2CXXBAdmTgAXHLIZVVzQ== )`
	RRSIG=13941 and DNSKEY=13941 verifies the DS RRset
	DS=63679/SHA-256 is now in the chain-of-trust
	`ly.gov.tw. 300 IN DS ( 63679 8 2 5be9df5b6c2ac9236348f53338328ea2b7c6b2cb061535d40c668741bff5abd7 )`
	Query to dns2.ly.gov.tw for ly.gov.tw/DNSKEY
	Received 3455 bytes from 210.69.138.122
	;; Response received from [210.69.138.122] 3455 octets ;; HEADER SECTION ;; id = 11665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 12 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN DNSKEY ;; ANSWER SECTION (12 records) ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAcr4VbJ1BegXhIUfHNj5nAEo8vYO/Sf3O2bjFrczgyuR+I6cLZ/93XWLo3oB8b5oq8+mBpR9 e1qShqG7FCZHul4ikBbCC196Gb+hAXL1V0pyBvG5EriyoOq7V01bzx4xEj897+4LZUantEU6ieY7 0h7ZUl6wTY2WTzuNYKcKhGhgeumXDe5UQVpVLB7FIrDf5b6doUdOMczqWvX14VhDWRYyGtUk7k2F /EMW6syaBoSzQTjN0WMNBANTSi7iJ65Wl72Djv+cgHbmfQgMENz9QAWyuFHRPmqhYGukHYbORR4c j1rPozZLqoiIxmNWuHpvLCh733g8NSXNjqntqoxuAn8= ) ; Key ID = 41658 ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAcifA+MIt37GuckITKzLdbgxzyxHng6drUB+IF0Fz7qmCKGiVuv/SxRJkRruIDVDmYrcLFTe KNi4nU/LEiDJU6878dpl2MvyXaxtcaVfOo/SX+z6Kcwg3ZAL7VwMSzysxD8UxZSHWmZwVjGb1qYG IQX1kTd0Rk9aASp5VgZzE3Dlb+ginsIrC69ugZRVAbbS1bbOfOeiTbQwFZRZf7B9AQg7s+T/YLnP czh605zTVokifhKKXK5qGd8Cn4uq3TAM/1FbcCKOYLbJP/njSlg7Pq41qK9k5MZvvI6ufHD59Zdc LzvA24iHVhEpWx6LbFn/FPtpGEuEWZ6X+KHs6xqrpAU= ) ; Key ID = 63679 ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAaJLi0HCdYPyuSLKXFeGV/Yls60egf2pKPjHOHvPHufqHHUiityIhwPqj+r7dNmh+5c+csfW rfdobjXzYZVSENnX9xth/PjkOs6cJwqLx3OOL6TVr/aho1nZNdmoap7H5pCx90EN2bEWszVUz+zS 9e1kDFT+g76aHIAjObnFksAd1gtdOOW+lpL/87d/hi7DlWpL4Bq50R3JQBmJpejaYIA9wMavnifV 1gv5xp0Z/GdBN6jcv+FMoKav0MT4UpHlpwn9CeTQEkxxdAiJdOC5hlpoY4/kgSQ2ewmVCWfN3axL mIH/SFbQ5Gt2gFPV1LW6E3XNI0zloccJhoNyz4QCmGk= ) ; Key ID = 59551 ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAZ46Qlc90gedFCziwtVEBC6j6a10hPf3GYmqqJThyHygV8co0YNqgMxAAzbJOHEQzlD2PAEp K2rvrCuRhlnGVRCFhJWFHyJ6nKW9/tL/tVOrnTc1IeTPsXMI2237krxOJxG9wIRdqX+l8q+SLJB/ wR31o36Gw48vBx5XP70h2TqqKn3tPshoRTOqowfNfrJTrJEB9kQrG36O+CjoT4UYkRI3J2wWKfOH QbCNXM1D83JcGnpLdQxQjQitLwPVSr2ZsEvAwThKebB4C32dSpJ+wpxFifQmLB3GG562wXAP08JH Bl8WS3U0J+kFOMeZ/ed6QxM6rRYtz5Yf73d+nRx9APc= ) ; Key ID = 45964 ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAdMUAxss5dG/Q4jPpo+PcI9o7P6HnA1gSY7mEz8tLw7bwP8cbZdGJfr7FWD7T8q+43xFs2MM uEhiGtYD9vzGobiYoTHqf8PULjHFmawixGdH2tepfG6x07QgcBLtVsWNU3DTDwUQr5TRQTNa1Zpg E58xuO2zQph/TiuXznzpBI6badKy9GfX+vShWxvSN13zOG/wpr81NTWwHYGYsfXDsaCtcfCkb9V3 qHdz6wrYJVrG7hkAVhMI3jgoozW2TOs+mRhvFOluGsy0smQhumlZWGGD/SIe72WzTljLwI9Xq3vg 4JPKSl2afg50llYjCAt2ZSHO+uGb5ieXf1OesEX62GM= ) ; Key ID = 55365 ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAa8YVhfEa1dbaQk7ctGOZzMqviLUeLe2qkhAgpEHxRtXnPIiijxYf/jJ+YLNx9+vWaBbCEDU se3xuCwBw9mLYo4AFGzpZeRYNrSklrmHiREpivPlPrVONKACsUUzPjLoA0wgc8rel28vvjI8WunJ vC40/FXIU3Xu3iKnO7nKbatDEITe6e3wCxqmWrqMr3FdYqco74uftizEoJ/89DDEuh/nC10HEdxl z4bN+LSFsSW832YfSuRALBZyRSH/XjgQKol0xbyTdLzyA2sKn6DaSHEGa7MS7ElbDtaCil0Spc0m dxHa5n1lACrdpuO54/Q/bFF55+XzoT1zqxChAS70DSk= ) ; Key ID = 61849 ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAZZUyV33l9wDN0ewh/eM/RaynuWueRntWI6KG8NOyScZzMOVOYc8P82Fz91xxX7x7FRKctdK fyh56DCOPYZ88amplglsYhXpNY20KHc8FqbhXFHDbfpHkju2VuCLHAIrAKghJaZfokrBH4sBA78o olzzzFBI4thU1dEZs5TVqjRrclgo0AHLLcFHirPuTviXTQHwr0hxKL4cJC1SwhxS4uL7jPvhKDUf WrlQe7F4tggDTPs5rLrWsZ1GB0ATJnKpiROyLrXkxnGb5wo9WDRJBKopQOg5uvt5cgBKxc/e15cK K7/3GIKPAWW4szz1xfL93meveVn1Tp2uhfXmeGYt0hE= ) ; Key ID = 64128 ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 41658 ly.gov.tw. O53gGzrCl/fsL17cnDkLDfOucHXs4dv0fKtNu3Fe+NXWZ5k4EV8O737x68vCGIQCMEVMj5WPjFHo GVWP9M33hOPb0FtEfmgOA3k5d/tQniBavhtIV0Va6DM0dhMYcxZYom+J8dKUwbQX+vVSgtB7xZeg hfpyoR5AvM6SRSX//k8mm5WMEnsp3/+VnovZulKpkSyMiq5Lob1pSxn3PsHBdrw30QztiHMIyRqT ysc31SLUYgn/hqOt0DRJX8c34IxHR3ufNGIwc2kdf0f7Z4dT/M4OjOcC7HUUBonOCd9Ssj8frpin UMA3UAOyNQGmtJFtEqCIo5Zw6/3e07q17JMliQ== ) ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 45964 ly.gov.tw. mHEEtb53DwSreldAq76BcHPK4hjSm45l3j5M155ogBgKiDD8uGpT80GS7b9x2eBBjv04F0zVHatQ RoBH217dq0drsAUrSZoH0+7HOGBK4Lb37u0DnTd5sgxHUJ+UoN17ki8+iElMN4ZU3lBY5jGkbLk1 5PPvRNKi4p7NMnR6/3GORZAAKePSeg/5qceGHEkRgxFM55GBT3pdDrHGiq6Rjk+U1cKBJqyG3JLu gcEk2N4dTNrD9TZ5jg5BRLCZzAI6QtXCArI1cIX8JCHKcF7oELuur3Yi8KznDp/yWSbNOJlgJSU1 eNmjZST4T/AME5MkWnLxSacBZ6gyIStN8OJ2KQ== ) ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 59551 ly.gov.tw. RbBlmhxi1kUbOqst80BwXsbRrfkmG9JOSACqpKWp/GbzTTvtYvK7BAu1h5VnW1TZuIhZCqlou4Mu Cz5zZGQ4xNvhoxaADu7q/Dl/8sk2AbJKRFt7537f7ImFDsd1eTZWHD+Tj/qaLIdQn1E+1i05pqDd fo5T78pwtwaDiVg0F0+z2VWpskWDw7gaMozVhXZY+P2Yi0BULk45zM99NJ38hQ7Qvn1egZtP8Vz6 80LefFXi8EpeHgBgLNpFYr6QItkFNT1lf37bnVubE1rPL9PNgr05mdzsGHHXhbFTjZniRwyOiZZ1 YGjbdBSB7afZ0SNao29w6oWFoIL62ofdA+h3pg== ) ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 61849 ly.gov.tw. GQAK9Qria2a0L87vd2jzKhDrW/n7hRdWGHC11LB2zBdofLttVWaKeCNIpJKZKINr7BxL03vMIo1T JVgDTXQceoXkPulsKWoLfV/BVG7Ad4krsC1kb8yXRjQssk+UyRsUqoWAftLocEkhRD0V4ccrz+Qz mseI8OcfYHJjekwEMyFGk7QDg2sE4TtdQAmDljOlsBp/4EJY/IshlfPhwEeQsEXYtlg9h5B6PzIV u0lremCQHhkV0OKE6pR7nrN3TGUymc47I665IAqxm94jdLK6ju/+PmtOz9Lqr5Em2I/jpJ7nB/lI 93E6Pp70xyN+OiolG2UbJJcsgcXf2CDNxCT8DQ== ) ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 63679 ly.gov.tw. fb8kkUmnDNGCmGVtAvZ/SCwwtFXdpZ2MgBL8vuiyEQzYqLU6vAk6U5D1sqfzWSI/Ss/Ue3QlAjTu abyoSEKZtTaWMMQLIb27QRxEygsgpka4ytBrCv/uVdhL0DRLN+h3gbqRmORkaeagW2xUVm/sDBjX 4LF3HNBdkx3fiSRc6iSSjNas9RQ9CvvmhQYpVbGlzeVspjpc2iVYnq0/gVLiVnXHmqsansr28ree 9vrnoYEgEb9o1CT6+xNSsaYFAt7XX9lZwmLB7apm0MEICR/BdVM//qYl39jIFelXOYGcjg0wUMs5 TDpSXZnQq4q/ajoO6V9Af9APIxufm6musUnYYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 7 DNSKEY records for ly.gov.tw
	`ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAcr4VbJ1BegXhIUfHNj5nAEo8vYO/Sf3O2bjFrczgyuR+I6cLZ/93XWLo3oB8b5oq8+mBpR9 e1qShqG7FCZHul4ikBbCC196Gb+hAXL1V0pyBvG5EriyoOq7V01bzx4xEj897+4LZUantEU6ieY7 0h7ZUl6wTY2WTzuNYKcKhGhgeumXDe5UQVpVLB7FIrDf5b6doUdOMczqWvX14VhDWRYyGtUk7k2F /EMW6syaBoSzQTjN0WMNBANTSi7iJ65Wl72Djv+cgHbmfQgMENz9QAWyuFHRPmqhYGukHYbORR4c j1rPozZLqoiIxmNWuHpvLCh733g8NSXNjqntqoxuAn8= ) ; Key ID = 41658`
	`ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAcifA+MIt37GuckITKzLdbgxzyxHng6drUB+IF0Fz7qmCKGiVuv/SxRJkRruIDVDmYrcLFTe KNi4nU/LEiDJU6878dpl2MvyXaxtcaVfOo/SX+z6Kcwg3ZAL7VwMSzysxD8UxZSHWmZwVjGb1qYG IQX1kTd0Rk9aASp5VgZzE3Dlb+ginsIrC69ugZRVAbbS1bbOfOeiTbQwFZRZf7B9AQg7s+T/YLnP czh605zTVokifhKKXK5qGd8Cn4uq3TAM/1FbcCKOYLbJP/njSlg7Pq41qK9k5MZvvI6ufHD59Zdc LzvA24iHVhEpWx6LbFn/FPtpGEuEWZ6X+KHs6xqrpAU= ) ; Key ID = 63679`
	`ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAaJLi0HCdYPyuSLKXFeGV/Yls60egf2pKPjHOHvPHufqHHUiityIhwPqj+r7dNmh+5c+csfW rfdobjXzYZVSENnX9xth/PjkOs6cJwqLx3OOL6TVr/aho1nZNdmoap7H5pCx90EN2bEWszVUz+zS 9e1kDFT+g76aHIAjObnFksAd1gtdOOW+lpL/87d/hi7DlWpL4Bq50R3JQBmJpejaYIA9wMavnifV 1gv5xp0Z/GdBN6jcv+FMoKav0MT4UpHlpwn9CeTQEkxxdAiJdOC5hlpoY4/kgSQ2ewmVCWfN3axL mIH/SFbQ5Gt2gFPV1LW6E3XNI0zloccJhoNyz4QCmGk= ) ; Key ID = 59551`
	`ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAZ46Qlc90gedFCziwtVEBC6j6a10hPf3GYmqqJThyHygV8co0YNqgMxAAzbJOHEQzlD2PAEp K2rvrCuRhlnGVRCFhJWFHyJ6nKW9/tL/tVOrnTc1IeTPsXMI2237krxOJxG9wIRdqX+l8q+SLJB/ wR31o36Gw48vBx5XP70h2TqqKn3tPshoRTOqowfNfrJTrJEB9kQrG36O+CjoT4UYkRI3J2wWKfOH QbCNXM1D83JcGnpLdQxQjQitLwPVSr2ZsEvAwThKebB4C32dSpJ+wpxFifQmLB3GG562wXAP08JH Bl8WS3U0J+kFOMeZ/ed6QxM6rRYtz5Yf73d+nRx9APc= ) ; Key ID = 45964`
	`ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAdMUAxss5dG/Q4jPpo+PcI9o7P6HnA1gSY7mEz8tLw7bwP8cbZdGJfr7FWD7T8q+43xFs2MM uEhiGtYD9vzGobiYoTHqf8PULjHFmawixGdH2tepfG6x07QgcBLtVsWNU3DTDwUQr5TRQTNa1Zpg E58xuO2zQph/TiuXznzpBI6badKy9GfX+vShWxvSN13zOG/wpr81NTWwHYGYsfXDsaCtcfCkb9V3 qHdz6wrYJVrG7hkAVhMI3jgoozW2TOs+mRhvFOluGsy0smQhumlZWGGD/SIe72WzTljLwI9Xq3vg 4JPKSl2afg50llYjCAt2ZSHO+uGb5ieXf1OesEX62GM= ) ; Key ID = 55365`
	`ly.gov.tw. 172800 IN DNSKEY ( 257 3 8 AwEAAa8YVhfEa1dbaQk7ctGOZzMqviLUeLe2qkhAgpEHxRtXnPIiijxYf/jJ+YLNx9+vWaBbCEDU se3xuCwBw9mLYo4AFGzpZeRYNrSklrmHiREpivPlPrVONKACsUUzPjLoA0wgc8rel28vvjI8WunJ vC40/FXIU3Xu3iKnO7nKbatDEITe6e3wCxqmWrqMr3FdYqco74uftizEoJ/89DDEuh/nC10HEdxl z4bN+LSFsSW832YfSuRALBZyRSH/XjgQKol0xbyTdLzyA2sKn6DaSHEGa7MS7ElbDtaCil0Spc0m dxHa5n1lACrdpuO54/Q/bFF55+XzoT1zqxChAS70DSk= ) ; Key ID = 61849`
	`ly.gov.tw. 172800 IN DNSKEY ( 256 3 8 AwEAAZZUyV33l9wDN0ewh/eM/RaynuWueRntWI6KG8NOyScZzMOVOYc8P82Fz91xxX7x7FRKctdK fyh56DCOPYZ88amplglsYhXpNY20KHc8FqbhXFHDbfpHkju2VuCLHAIrAKghJaZfokrBH4sBA78o olzzzFBI4thU1dEZs5TVqjRrclgo0AHLLcFHirPuTviXTQHwr0hxKL4cJC1SwhxS4uL7jPvhKDUf WrlQe7F4tggDTPs5rLrWsZ1GB0ATJnKpiROyLrXkxnGb5wo9WDRJBKopQOg5uvt5cgBKxc/e15cK K7/3GIKPAWW4szz1xfL93meveVn1Tp2uhfXmeGYt0hE= ) ; Key ID = 64128`
	DNSKEY=63679/SEP is now in the chain-of-trust
	DS=63679/SHA-256 verifies DNSKEY=63679/SEP
	Found 5 RRSIGs over DNSKEY RRset
	`ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 41658 ly.gov.tw. O53gGzrCl/fsL17cnDkLDfOucHXs4dv0fKtNu3Fe+NXWZ5k4EV8O737x68vCGIQCMEVMj5WPjFHo GVWP9M33hOPb0FtEfmgOA3k5d/tQniBavhtIV0Va6DM0dhMYcxZYom+J8dKUwbQX+vVSgtB7xZeg hfpyoR5AvM6SRSX//k8mm5WMEnsp3/+VnovZulKpkSyMiq5Lob1pSxn3PsHBdrw30QztiHMIyRqT ysc31SLUYgn/hqOt0DRJX8c34IxHR3ufNGIwc2kdf0f7Z4dT/M4OjOcC7HUUBonOCd9Ssj8frpin UMA3UAOyNQGmtJFtEqCIo5Zw6/3e07q17JMliQ== )`
	`ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 45964 ly.gov.tw. mHEEtb53DwSreldAq76BcHPK4hjSm45l3j5M155ogBgKiDD8uGpT80GS7b9x2eBBjv04F0zVHatQ RoBH217dq0drsAUrSZoH0+7HOGBK4Lb37u0DnTd5sgxHUJ+UoN17ki8+iElMN4ZU3lBY5jGkbLk1 5PPvRNKi4p7NMnR6/3GORZAAKePSeg/5qceGHEkRgxFM55GBT3pdDrHGiq6Rjk+U1cKBJqyG3JLu gcEk2N4dTNrD9TZ5jg5BRLCZzAI6QtXCArI1cIX8JCHKcF7oELuur3Yi8KznDp/yWSbNOJlgJSU1 eNmjZST4T/AME5MkWnLxSacBZ6gyIStN8OJ2KQ== )`
	`ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 59551 ly.gov.tw. RbBlmhxi1kUbOqst80BwXsbRrfkmG9JOSACqpKWp/GbzTTvtYvK7BAu1h5VnW1TZuIhZCqlou4Mu Cz5zZGQ4xNvhoxaADu7q/Dl/8sk2AbJKRFt7537f7ImFDsd1eTZWHD+Tj/qaLIdQn1E+1i05pqDd fo5T78pwtwaDiVg0F0+z2VWpskWDw7gaMozVhXZY+P2Yi0BULk45zM99NJ38hQ7Qvn1egZtP8Vz6 80LefFXi8EpeHgBgLNpFYr6QItkFNT1lf37bnVubE1rPL9PNgr05mdzsGHHXhbFTjZniRwyOiZZ1 YGjbdBSB7afZ0SNao29w6oWFoIL62ofdA+h3pg== )`
	`ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 61849 ly.gov.tw. GQAK9Qria2a0L87vd2jzKhDrW/n7hRdWGHC11LB2zBdofLttVWaKeCNIpJKZKINr7BxL03vMIo1T JVgDTXQceoXkPulsKWoLfV/BVG7Ad4krsC1kb8yXRjQssk+UyRsUqoWAftLocEkhRD0V4ccrz+Qz mseI8OcfYHJjekwEMyFGk7QDg2sE4TtdQAmDljOlsBp/4EJY/IshlfPhwEeQsEXYtlg9h5B6PzIV u0lremCQHhkV0OKE6pR7nrN3TGUymc47I665IAqxm94jdLK6ju/+PmtOz9Lqr5Em2I/jpJ7nB/lI 93E6Pp70xyN+OiolG2UbJJcsgcXf2CDNxCT8DQ== )`
	`ly.gov.tw. 172800 IN RRSIG ( DNSKEY 8 3 172800 20240516183253 20240512173253 63679 ly.gov.tw. fb8kkUmnDNGCmGVtAvZ/SCwwtFXdpZ2MgBL8vuiyEQzYqLU6vAk6U5D1sqfzWSI/Ss/Ue3QlAjTu abyoSEKZtTaWMMQLIb27QRxEygsgpka4ytBrCv/uVdhL0DRLN+h3gbqRmORkaeagW2xUVm/sDBjX 4LF3HNBdkx3fiSRc6iSSjNas9RQ9CvvmhQYpVbGlzeVspjpc2iVYnq0/gVLiVnXHmqsansr28ree 9vrnoYEgEb9o1CT6+xNSsaYFAt7XX9lZwmLB7apm0MEICR/BdVM//qYl39jIFelXOYGcjg0wUMs5 TDpSXZnQq4q/ajoO6V9Af9APIxufm6musUnYYA== )`
	RRSIG=41658 and DNSKEY=41658 verifies the DNSKEY RRset
	RRSIG=45964 and DNSKEY=45964/SEP verifies the DNSKEY RRset
	RRSIG=59551 and DNSKEY=59551/SEP verifies the DNSKEY RRset
	RRSIG=61849 and DNSKEY=61849/SEP verifies the DNSKEY RRset
	RRSIG=63679 and DNSKEY=63679/SEP verifies the DNSKEY RRset
	DNSKEY=41658 is now in the chain-of-trust
	DNSKEY=59551/SEP is now in the chain-of-trust
	DNSKEY=45964/SEP is now in the chain-of-trust
	DNSKEY=55365 is now in the chain-of-trust
	DNSKEY=61849/SEP is now in the chain-of-trust
	DNSKEY=64128 is now in the chain-of-trust
	Query to dns4.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.241.74.122
	;; Response received from [210.241.74.122] 793 octets ;; HEADER SECTION ;; id = 49300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.ly.gov.tw is authoritative for ly.gov.tw
	Found RRSIG signed by ly.gov.tw zone
	Query to dns2.ly.gov.tw for ly.gov.tw/SOA
	Received 410 bytes from 210.69.138.122
	;; Response received from [210.69.138.122] 410 octets ;; HEADER SECTION ;; id = 42144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN SOA ;; ANSWER SECTION (2 records) ly.gov.tw. 28800 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 28800 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.ly.gov.tw for ly.gov.tw/SOA
	Received 410 bytes from 210.241.74.121
	;; Response received from [210.241.74.121] 410 octets ;; HEADER SECTION ;; id = 13397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN SOA ;; ANSWER SECTION (2 records) ly.gov.tw. 28800 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 28800 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.ly.gov.tw for ly.gov.tw/SOA
	Received 410 bytes from 210.69.138.121
	;; Response received from [210.69.138.121] 410 octets ;; HEADER SECTION ;; id = 14737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN SOA ;; ANSWER SECTION (2 records) ly.gov.tw. 28800 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 28800 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.241.74.122
	;; Response received from [210.241.74.122] 793 octets ;; HEADER SECTION ;; id = 5857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== )`
	RRSIG=41658 and DNSKEY=41658 verifies the SOA RRset

ly.gov.tw

	Query to dns1.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.69.138.121
	;; Response received from [210.69.138.121] 793 octets ;; HEADER SECTION ;; id = 63101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.ly.gov.tw is authoritative for ly.gov.tw
	Found RRSIG signed by ly.gov.tw zone
	Query to dns1.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.69.138.121
	;; Response received from [210.69.138.121] 793 octets ;; HEADER SECTION ;; id = 40112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== )`
	RRSIG=41658 and DNSKEY=41658 verifies the SOA RRset

ly.gov.tw

	Query to dns2.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.69.138.122
	;; Response received from [210.69.138.122] 793 octets ;; HEADER SECTION ;; id = 38396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.ly.gov.tw is authoritative for ly.gov.tw
	Found RRSIG signed by ly.gov.tw zone
	Query to dns2.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.69.138.122
	;; Response received from [210.69.138.122] 793 octets ;; HEADER SECTION ;; id = 32706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== )`
	RRSIG=41658 and DNSKEY=41658 verifies the SOA RRset

ly.gov.tw

	Query to dns3.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.241.74.121
	;; Response received from [210.241.74.121] 793 octets ;; HEADER SECTION ;; id = 1968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.ly.gov.tw is authoritative for ly.gov.tw
	Found RRSIG signed by ly.gov.tw zone
	Query to dns3.ly.gov.tw for ly.gov.tw/A
	Received 793 bytes from 210.241.74.121
	;; Response received from [210.241.74.121] 793 octets ;; HEADER SECTION ;; id = 65380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ly.gov.tw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ly.gov.tw. 900 IN SOA ( ns1.ly.gov.tw. please_set_email.absolutely.nowhere. 48168 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN NSEC3 ( 1 0 10 4ba52df56f25 lci06abntc35ej8ulr0onkah56oo1vrd NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) JJ2I686F32UGTCJCFIK6GB439BJDGVF2.ly.gov.tw. 900 IN RRSIG ( NSEC3 8 4 900 20240516183251 20240512173251 41658 ly.gov.tw. rv2qI7tqT15psnyXJ6D2Zn6CQF7ZbJUvE5elGtQlfFaAExIIL9WGa1kIRZNo1X+A2omqJ+9ztzr4 4MVmi6P9jjTIkbd2f8W6sjXKM494PwaE/I/eIzxKcbj64YeW1zwLqmaMAdUOLs1uAx4wkg4lDoGG M8jD10n6hlxCLdLOmFEkrJvTMK8jX332782iRv2xUauHVnfcpWv+epiwhZN6N2lVvBIpsDub7Zcg RqsEOVbionU1ZCgSW+zKTgGFe/bGyzk9CMPFZ5wPqtWB2QWHDef8gAVm/zDivtyD3ThptOMpBAvc DtfPuVIxF8jAhPz2BhoJFEzoOONRvDkvPe+l/w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ly.gov.tw. 900 IN RRSIG ( SOA 8 3 28800 20240516183254 20240512173254 41658 ly.gov.tw. nzDqZ+VbtIfWGmF8yv9bTUNLD5MsXyo61CKUsdKT3RImOyPHcWrdTy9cWpVUga+gAdPujDk57eD4 lhqmMsI3mw16zceFxnXZTcWpU+PH+vJz0+NzqNALMf6qcg2Z3O2cyfIkAFuz+orAayPHjsAeOcr2 iNM7cr0lJRHp+RI5DnlVFJiRZkmSiskDXw5MKczhU0D40FCCr5Dukc8ZBqjMjjzSMwPi73EFLNXV r/vpFtRyrltWpgHtlQsPxJ/N7kfy/G5KKusFf76qJ/RFPX4+oicyO3Ou97soMSBahrf+OKu5zI6f BGqkNlB3Jgat5yTYbI44Bp6oHFIOh8Dq5I3UGA== )`
	RRSIG=41658 and DNSKEY=41658 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ly.gov.tw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: