DNSSEC Analyzer - QATESTTWAI.GOV

Domain Name:

Time: 2022-08-19 02:46:55 UTC, NTP stratum 16

Analyzing DNSSEC problems for QATESTTWAI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (865 octets) ;; HEADER SECTION ;; id = 46346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to a.root-servers.net for QATESTTWAI.GOV/A
	Received 633 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (633 octets) ;; HEADER SECTION ;; id = 9826 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (622 octets) ;; HEADER SECTION ;; id = 9874 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 370 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (370 octets) ;; HEADER SECTION ;; id = 8647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 35788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to c.gov-servers.net for QATESTTWAI.GOV/A
	Received 395 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (395 octets) ;; HEADER SECTION ;; id = 33819 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) QATESTTWAI.GOV. 86400 IN NS ns4.twai.GOV. QATESTTWAI.GOV. 86400 IN NS ns3.twai.GOV. QATESTTWAI.GOV. 3600 IN DS ( 26169 7 1 19fce74749edb42bf39a1b4495dc089b6a67d852 ) QATESTTWAI.GOV. 3600 IN DS ( 26169 7 2 1e61a9dae947ded5babcc28ecf92eb2362581794534fb093c752ac85e1f76c4c ) QATESTTWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234012 20220818234012 261 gov. jqXG33liMPVw692y7t0bmPMZH5yALeXHM+NZHKZpoHZDDak2TegsxevE3PPZJsXz6mwYV+cRDkLI 8mFozriGu0pQ29y+8bkEOeNPbg8fP+bKnlp6u6HyKSy1du20NGYdWPZXcoWNOVHmEl8mhbtjTPa6 RphTko4VmekbJl85Oce5IBHt5kipcq2GGM9vez3H9G+sLfI05BOG/HWm4rvmwg== ) ;; ADDITIONAL SECTION (3 records) ns3.twai.GOV. 86400 IN A 199.169.197.64 ns4.twai.GOV. 86400 IN A 199.169.196.64 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for QATESTTWAI.GOV/DNSKEY
	Received 395 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (395 octets) ;; HEADER SECTION ;; id = 63168 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) QATESTTWAI.GOV. 86400 IN NS ns4.twai.GOV. QATESTTWAI.GOV. 86400 IN NS ns3.twai.GOV. QATESTTWAI.GOV. 3600 IN DS ( 26169 7 1 19fce74749edb42bf39a1b4495dc089b6a67d852 ) QATESTTWAI.GOV. 3600 IN DS ( 26169 7 2 1e61a9dae947ded5babcc28ecf92eb2362581794534fb093c752ac85e1f76c4c ) QATESTTWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234012 20220818234012 261 gov. jqXG33liMPVw692y7t0bmPMZH5yALeXHM+NZHKZpoHZDDak2TegsxevE3PPZJsXz6mwYV+cRDkLI 8mFozriGu0pQ29y+8bkEOeNPbg8fP+bKnlp6u6HyKSy1du20NGYdWPZXcoWNOVHmEl8mhbtjTPa6 RphTko4VmekbJl85Oce5IBHt5kipcq2GGM9vez3H9G+sLfI05BOG/HWm4rvmwg== ) ;; ADDITIONAL SECTION (3 records) ns3.twai.GOV. 86400 IN A 199.169.197.64 ns4.twai.GOV. 86400 IN A 199.169.196.64 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone QATESTTWAI.GOV

QATESTTWAI.GOV

	Checking DS between GOV and QATESTTWAI.GOV
	Query to c.gov-servers.net for QATESTTWAI.GOV/DS
	Received 322 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (322 octets) ;; HEADER SECTION ;; id = 16000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN DS ;; ANSWER SECTION (3 records) QATESTTWAI.GOV. 3600 IN DS ( 26169 7 1 19fce74749edb42bf39a1b4495dc089b6a67d852 ) QATESTTWAI.GOV. 3600 IN DS ( 26169 7 2 1e61a9dae947ded5babcc28ecf92eb2362581794534fb093c752ac85e1f76c4c ) QATESTTWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234012 20220818234012 261 gov. jqXG33liMPVw692y7t0bmPMZH5yALeXHM+NZHKZpoHZDDak2TegsxevE3PPZJsXz6mwYV+cRDkLI 8mFozriGu0pQ29y+8bkEOeNPbg8fP+bKnlp6u6HyKSy1du20NGYdWPZXcoWNOVHmEl8mhbtjTPa6 RphTko4VmekbJl85Oce5IBHt5kipcq2GGM9vez3H9G+sLfI05BOG/HWm4rvmwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for QATESTTWAI.GOV in the GOV zone
	DS=26169/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=26169/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`QATESTTWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234012 20220818234012 261 gov. jqXG33liMPVw692y7t0bmPMZH5yALeXHM+NZHKZpoHZDDak2TegsxevE3PPZJsXz6mwYV+cRDkLI 8mFozriGu0pQ29y+8bkEOeNPbg8fP+bKnlp6u6HyKSy1du20NGYdWPZXcoWNOVHmEl8mhbtjTPa6 RphTko4VmekbJl85Oce5IBHt5kipcq2GGM9vez3H9G+sLfI05BOG/HWm4rvmwg== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=26169/SHA-1 is now in the chain-of-trust
	`QATESTTWAI.GOV. 3600 IN DS ( 26169 7 1 19fce74749edb42bf39a1b4495dc089b6a67d852 )`
	`QATESTTWAI.GOV. 3600 IN DS ( 26169 7 2 1e61a9dae947ded5babcc28ecf92eb2362581794534fb093c752ac85e1f76c4c )`
	Query to ns3.twai.GOV for QATESTTWAI.GOV/DNSKEY
	Received 1777 bytes from 199.169.197.64
	;; Response received from 199.169.197.64 (1777 octets) ;; HEADER SECTION ;; id = 32089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) QATESTTWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAfJYrrkWpu8cbyMBp++moplGHzVBxgYu+tHl4ZOR0Y9ksTMeO6BzNPxM6yY+RdVW35zT7xUe VPLb988stAmZkfdqe3dSM2C95fkp5eeSZedzTTlDbQkLMwJ2CzsH5SpylMRoIR63Su3A60v0kW+8 neGemQyP52RY9P7jdbCZ7AutRQSaFn54SQfRqSx53u1zifnqmKK48w6UOqfOdwolCLZ1YUuiOfm0 KYZ9eplR5SjPXG6IGiJWCPUWh1dkvqmGlulnwpfXBgWtQfehTja8H1/IP73ohI1CGV1Dpg4dqo0s xUEvQboNKuNi7mVHEqKYC1jsDnOnBdKQrD1yA91GDq0= ) ; Key ID = 55022 QATESTTWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaWlfYPCayERS+DwoSRDmgJn2strOzJbaOcfbkWueK3dP6UvCsPzLsHXGf2jNwHQmhzRTDwo fnEKBlrEkgEYiWY5NT+ydFMlSkjVYaOMSbNshxUHvvNJEqxG5M8SDZvXoV+kk/4O+wa68YX55dXi 6XfNrEVeVCSgg8x0tiX3n9BvwgcZmTM2nrAodvEYRNTPUl+o+0lUMAn7vEGhEPh8NC2naqC0Ea96 nHt+F6dOgynpGicy+UNntlfdI4qJe6qef954CkaoZ6Ar8VFp4OloRSE6jHa8u4aEMx+tyB9ruJfa iDa8s3KwrnOkQy7m6nbN7Vnzv1TuGrjGvlye4rT/DLE= ) ; Key ID = 56372 QATESTTWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAc3sA7DdkRQRfDoCOBXsm51VxRY0Cq25b5mu3r3BE5B0hTrQDFgXUHY5m0XGOF3KKUEXTWb+ 1Cr/e3egorJUyiWDSwWk3TcnVRvpmkuNoYQvRYhjS9zVQdyuOx4JULNGljT9EBK+Zk/eM/aolnIW AVpjqAj4++IrZH8IFfPUuohdCRMN8KZqd12BYe6/ph3G4gGMzKzrww3/Aaoz/YjF7/rDdDkssfoq dKg24LwlrymAGre7OzE01yKK0CASW4kOZ5TUKZhnYBT9mbyFaAiXIJDkQjgCoNOnmLR+FWjJkp4T tYvJBdCNcKA+gDBxPgUJB2znyVL55BiPMf96SYl7vTs= ) ; Key ID = 26169 QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 55022 qatesttwai.gov. 0i1OO2v2e5db6xPzRHC64r8A7OijemzOrXRYufIag+Bf0GnHlWUTkq6PNxS/cVhmacKVONo/VWVj eBkjhM7nrEfqaaYmYBEk825aSgPF0nAYcWJDcDKtC/3jE6SU1RKmZP9nA/spHOmHx2ESLyANImfh AWyOjglqzL+4DPIdUfg7jcOT64jQE1OVAAHk1JJnG/p/xinRbGFZBA+2lfbPU7+h+1Rz1EY02SZ+ ec+AGpDDbo5nPGYooSdBUnPWnkhYRrON6T8YwL10B0HU8FGM+46UZi59F2zG/BU5bBkvjv0p5hbj tF1eTqD1i9cALBbS1f/lm3KEQP3Nxlu3FfsKeg== ) QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 56372 qatesttwai.gov. fU7weXwUGonLGUi+OKoCpiBzO2JLrYpbxYoFhIipp6fk8fA/BHGtVnfRwIz055zE65CVCAqLq6wC gByS7SqwYc8Bjn21rjxgmG0GJmvqP5Ivf9tMhiiK4EyEkLH8T2D0/7aPx9Gw+DR8OdzAiLahpzgE Aa/Tuv7Bw/hGOnZvy5sPwQEGpNsG7F94e7QtES/JYX2WaAXxbHIdnjrWpij76+8qoHouEaa+civm 2ACjamHCROASS0Xc1oF+RDz8JS8hDCLjV89bIt/tz4u8t8myy2NYyspqqfwnTBJLXpG227+XqJYX otU58LUdARTuujRtTSQX+roslX5TuxwWNR5jNw== ) QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 26169 qatesttwai.gov. bGeEtw4M++sdHy/enrvuv3yYuYi8zsdDW27N6JGAxr0a4fQyABNBugNlgwFoTVZ/b31QFf0r/GPY KV//y1S49b+3t9uGMRlkjxMGfdOFdj9i/vBNEscxVlTvjRr6W+Z0geUyQMiBH0soqB0O87o/l7Jo fDAe4eOpHUVu3QkVBJwqUOO/aHv0lHMvCkN4ZngqdPF0Up7pWJ2AA/61EGMX2bt3Z5b7bUY301Tm /Z6M9b0SDSvJPrH+4xwA63P6OG/q5JhPyvMwbRNowptoOpLdeZT7r6CLFO1wjpmCOI36/Kg22ZVZ DpEn/H2kN4lztAF9Q2y7gdicwee0DdfpmY4Y8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for QATESTTWAI.GOV
	`QATESTTWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAfJYrrkWpu8cbyMBp++moplGHzVBxgYu+tHl4ZOR0Y9ksTMeO6BzNPxM6yY+RdVW35zT7xUe VPLb988stAmZkfdqe3dSM2C95fkp5eeSZedzTTlDbQkLMwJ2CzsH5SpylMRoIR63Su3A60v0kW+8 neGemQyP52RY9P7jdbCZ7AutRQSaFn54SQfRqSx53u1zifnqmKK48w6UOqfOdwolCLZ1YUuiOfm0 KYZ9eplR5SjPXG6IGiJWCPUWh1dkvqmGlulnwpfXBgWtQfehTja8H1/IP73ohI1CGV1Dpg4dqo0s xUEvQboNKuNi7mVHEqKYC1jsDnOnBdKQrD1yA91GDq0= ) ; Key ID = 55022`
	`QATESTTWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaWlfYPCayERS+DwoSRDmgJn2strOzJbaOcfbkWueK3dP6UvCsPzLsHXGf2jNwHQmhzRTDwo fnEKBlrEkgEYiWY5NT+ydFMlSkjVYaOMSbNshxUHvvNJEqxG5M8SDZvXoV+kk/4O+wa68YX55dXi 6XfNrEVeVCSgg8x0tiX3n9BvwgcZmTM2nrAodvEYRNTPUl+o+0lUMAn7vEGhEPh8NC2naqC0Ea96 nHt+F6dOgynpGicy+UNntlfdI4qJe6qef954CkaoZ6Ar8VFp4OloRSE6jHa8u4aEMx+tyB9ruJfa iDa8s3KwrnOkQy7m6nbN7Vnzv1TuGrjGvlye4rT/DLE= ) ; Key ID = 56372`
	`QATESTTWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAc3sA7DdkRQRfDoCOBXsm51VxRY0Cq25b5mu3r3BE5B0hTrQDFgXUHY5m0XGOF3KKUEXTWb+ 1Cr/e3egorJUyiWDSwWk3TcnVRvpmkuNoYQvRYhjS9zVQdyuOx4JULNGljT9EBK+Zk/eM/aolnIW AVpjqAj4++IrZH8IFfPUuohdCRMN8KZqd12BYe6/ph3G4gGMzKzrww3/Aaoz/YjF7/rDdDkssfoq dKg24LwlrymAGre7OzE01yKK0CASW4kOZ5TUKZhnYBT9mbyFaAiXIJDkQjgCoNOnmLR+FWjJkp4T tYvJBdCNcKA+gDBxPgUJB2znyVL55BiPMf96SYl7vTs= ) ; Key ID = 26169`
	DNSKEY=26169/SEP is now in the chain-of-trust
	DS=26169/SHA-1 verifies DNSKEY=26169/SEP
	DS=26169/SHA-256 verifies DNSKEY=26169/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 55022 qatesttwai.gov. 0i1OO2v2e5db6xPzRHC64r8A7OijemzOrXRYufIag+Bf0GnHlWUTkq6PNxS/cVhmacKVONo/VWVj eBkjhM7nrEfqaaYmYBEk825aSgPF0nAYcWJDcDKtC/3jE6SU1RKmZP9nA/spHOmHx2ESLyANImfh AWyOjglqzL+4DPIdUfg7jcOT64jQE1OVAAHk1JJnG/p/xinRbGFZBA+2lfbPU7+h+1Rz1EY02SZ+ ec+AGpDDbo5nPGYooSdBUnPWnkhYRrON6T8YwL10B0HU8FGM+46UZi59F2zG/BU5bBkvjv0p5hbj tF1eTqD1i9cALBbS1f/lm3KEQP3Nxlu3FfsKeg== )`
	`QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 56372 qatesttwai.gov. fU7weXwUGonLGUi+OKoCpiBzO2JLrYpbxYoFhIipp6fk8fA/BHGtVnfRwIz055zE65CVCAqLq6wC gByS7SqwYc8Bjn21rjxgmG0GJmvqP5Ivf9tMhiiK4EyEkLH8T2D0/7aPx9Gw+DR8OdzAiLahpzgE Aa/Tuv7Bw/hGOnZvy5sPwQEGpNsG7F94e7QtES/JYX2WaAXxbHIdnjrWpij76+8qoHouEaa+civm 2ACjamHCROASS0Xc1oF+RDz8JS8hDCLjV89bIt/tz4u8t8myy2NYyspqqfwnTBJLXpG227+XqJYX otU58LUdARTuujRtTSQX+roslX5TuxwWNR5jNw== )`
	`QATESTTWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20220824090200 20220817080200 26169 qatesttwai.gov. bGeEtw4M++sdHy/enrvuv3yYuYi8zsdDW27N6JGAxr0a4fQyABNBugNlgwFoTVZ/b31QFf0r/GPY KV//y1S49b+3t9uGMRlkjxMGfdOFdj9i/vBNEscxVlTvjRr6W+Z0geUyQMiBH0soqB0O87o/l7Jo fDAe4eOpHUVu3QkVBJwqUOO/aHv0lHMvCkN4ZngqdPF0Up7pWJ2AA/61EGMX2bt3Z5b7bUY301Tm /Z6M9b0SDSvJPrH+4xwA63P6OG/q5JhPyvMwbRNowptoOpLdeZT7r6CLFO1wjpmCOI36/Kg22ZVZ DpEn/H2kN4lztAF9Q2y7gdicwee0DdfpmY4Y8w== )`
	RRSIG=55022 and DNSKEY=55022 verifies the DNSKEY RRset
	RRSIG=56372 and DNSKEY=56372 verifies the DNSKEY RRset
	RRSIG=26169 and DNSKEY=26169/SEP verifies the DNSKEY RRset
	DNSKEY=55022 is now in the chain-of-trust
	DNSKEY=56372 is now in the chain-of-trust
	Query to ns3.twai.GOV for QATESTTWAI.GOV/A
	Received 1389 bytes from 199.169.197.64
	;; Response received from 199.169.197.64 (1389 octets) ;; HEADER SECTION ;; id = 43805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) QATESTTWAI.GOV. 30 IN SOA ( ns3.twai.GOV. root.ns3.twai.GOV. 2021120101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220822040047 20220815030047 55022 qatesttwai.gov. vSyGHv726vp9NP6gbo/QreGfbbGmeWfuNRcuyzqg74XARkEzA+dap49CYPZ026cX3XPBqBZ1/H7z KTD/+mYTVtbd6KS/Au8G4JqU8uBXS39og5T9dxZyDt//TcfOdYa087ANnuNiXcclnI0Yu/vgpWsi C4bxPt+V0TiQtMPcOkTQRFYxdWewqIVlAzjz2FOwZUXsprN4qmHaOKJ3IX9svVUX0g2es4ioF4AU V+iKqCwEiU8lfRoj8Ky1/RsV4i/E4Mpxw86QUm4cx4ZINOe1apfzG8ZgkIWeHxs8iHyNd0FbBjMG itm0i7IpVu+CIsO61KUDvw8NWUqoCKUH09OeOQ== ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220824090200 20220817080200 56372 qatesttwai.gov. gqsqtZ7dh+tX1y3FGbd2DMbnkhZTKc5Ul3BOQhDHeeLuAKDPdufZXtu+5BSs97T8W5NxXswTWR5k wc9qzA8U0LR/XO81I+kuDCtG6NrT0sljhfVSRUacyj9Wv9VFWR+2wVaJbpi+v+EJeD52VL2wAsxT IsqMZc1cF/lpl0Dtgt5fbqckpoPG7DcJzPnBYlTE93iKTSn2s9nRlf7+og+tiSOCbZKfmRxnVZ3p MLzsy0rx6+nB5TlIKQTaM1wXAzSPsaL2OboMuZwHs/vvtVll04mEzHM4nFxICeAumrvUFoJDL2n2 Y0FCh09QWo6s8KjxwJGjGBj/8ZIPtlun4gqNAA== ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN NSEC3 ( 1 0 1 b5d235bba85cf6cc b71smce6m2e35t5l22o7a9u3gnmdgb49 NS SOA RRSIG DNSKEY NSEC3PARAM ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220822040047 20220815030047 55022 qatesttwai.gov. hANoLHUybTueweTPHimoDNbhxvBjqI4iXiUdXVue15UMDXegkEUgwqboFweYHht/n82VM0TWZmLw QRc7++BQtslfdgsPj43mwISJ2m54EE15YCj8e03gJ0byCTxf95bqs83rQy5jjqMQ0BDeA1IfcLcv pBvGCbioq8SAZ2Fy6nXc9oaUTaHKOxLOhpTqDLZE0e+1+KVqG4aaTmKxX5qyYpC9Fxl7dR8FIyt3 4aKGejhRlJEc/2HO2AxXARpOf8X2X6gzgbC2mizcR4+oLlSpGR3mvh/pgipHReLJTFb7w2E5biAY hinMBiZ+5fD5ZG1QENxkJdb4vpBkQCcCg3y45Q== ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220824113329 20220817103329 56372 qatesttwai.gov. HIm+DC7MYiCjD1eeBYxrj0LZjmpizHEPWqe3fRwEU2lchpexDnQg51ruwqe5jgxF9IJ3zwC4amPv HpPKCrYk9qbumMVfOsfrj9VOfqiO1391MfKDP/XiaxrKlXINWFqX9D7NhE3pSxn4UkjiqoUpngDi xfzoEh5esniRDI7Y6jQyx57Ik1oyu1HvprQpebevxXLAIo3+M1VuAuuwDEawGSeDC2nDIERF1YgJ MwgnL7KLWSwmtkbUTb7906rzJ4B+tNsr/RWHZTekCaaSVoBOkE8TF5Hew5k7cGhCig+5fozDJvlu JHnTDpa5gCzsGWlx9P3Ba0jVQKN20fE2+7FzZw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.twai.GOV is authoritative for QATESTTWAI.GOV
	Found RRSIG signed by qatesttwai.gov zone
	Query to ns4.twai.GOV for QATESTTWAI.GOV/SOA
	Received 729 bytes from 199.169.196.64
	;; Response received from 199.169.196.64 (729 octets) ;; HEADER SECTION ;; id = 40966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN SOA ;; ANSWER SECTION (2 records) QATESTTWAI.GOV. 30 IN SOA ( ns3.twai.GOV. root.ns3.twai.GOV. 2021120101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220823001134 20220815231134 56372 qatesttwai.gov. LxVdOsF2+Oszs5c0E2eDf3ndXMwE71ojwO22QY1QJk0HuhicLFn3f3yv6DzG3laPYmnL/ol1bYw2 OyaqvYotkBaWMVmBR9bzKtiO1br1igTmzXFedBbFXljBODSGbobWOT4b1S/gZczvWSwBh0RB0OGd 3gG4mnzfe5+5ndvnVUS43fsfZsvRZVf0qH0tr1I0/a2Zwb/AWx74q0w+kYuYEJoG4PYbbX4Voecw xo/HecDC9KcjdVCPcT6o6RjZqU+055Rzj3XtEwb+IJ7pAg2yaKCw2HJUD8RkC7acMerbr+I3Ij4G OiDHmz/rwZiEXTb4VPuB1hgQut+wERCnX/VYNw== ) ;; AUTHORITY SECTION (3 records) QATESTTWAI.GOV. 30 IN NS ns4.twai.GOV. QATESTTWAI.GOV. 30 IN NS ns3.twai.GOV. QATESTTWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20220823010448 20220816000448 56372 qatesttwai.gov. n+3zPJ5VI9N7qQUOa0oBxMDiY7zGd8et2pZXY3/7ua2pBqxwhswzDUvpEpbH1bQOufNNgD9LOSLV ci46XEZz3Y96sRvGCpsUeXXJaaD7ebWs1fCecKepb+GaXhBBynfwr9X0ywCx+vpFE8NYxwI25ExL KLQm3FggXgajWMG7VHV0/tPZv2LQ8Fq9s/EigOhaks+oy8P85IWmkyqsBsy9Sjka9FlnlJHlHffv d8qKI92RmmaQnuKM65JFlVY4JfMLr29ZjjeaztjqEyTU8qSDRN6wDRlx7ePpHRr951HodperldZT cKIeeT7JBzMRR+dI6PAd48U/5/72+67orWJnrw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.twai.GOV for QATESTTWAI.GOV/A
	Received 1389 bytes from 199.169.197.64
	;; Response received from 199.169.197.64 (1389 octets) ;; HEADER SECTION ;; id = 34380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) QATESTTWAI.GOV. 30 IN SOA ( ns3.twai.GOV. root.ns3.twai.GOV. 2021120101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220822040047 20220815030047 55022 qatesttwai.gov. vSyGHv726vp9NP6gbo/QreGfbbGmeWfuNRcuyzqg74XARkEzA+dap49CYPZ026cX3XPBqBZ1/H7z KTD/+mYTVtbd6KS/Au8G4JqU8uBXS39og5T9dxZyDt//TcfOdYa087ANnuNiXcclnI0Yu/vgpWsi C4bxPt+V0TiQtMPcOkTQRFYxdWewqIVlAzjz2FOwZUXsprN4qmHaOKJ3IX9svVUX0g2es4ioF4AU V+iKqCwEiU8lfRoj8Ky1/RsV4i/E4Mpxw86QUm4cx4ZINOe1apfzG8ZgkIWeHxs8iHyNd0FbBjMG itm0i7IpVu+CIsO61KUDvw8NWUqoCKUH09OeOQ== ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220824090200 20220817080200 56372 qatesttwai.gov. gqsqtZ7dh+tX1y3FGbd2DMbnkhZTKc5Ul3BOQhDHeeLuAKDPdufZXtu+5BSs97T8W5NxXswTWR5k wc9qzA8U0LR/XO81I+kuDCtG6NrT0sljhfVSRUacyj9Wv9VFWR+2wVaJbpi+v+EJeD52VL2wAsxT IsqMZc1cF/lpl0Dtgt5fbqckpoPG7DcJzPnBYlTE93iKTSn2s9nRlf7+og+tiSOCbZKfmRxnVZ3p MLzsy0rx6+nB5TlIKQTaM1wXAzSPsaL2OboMuZwHs/vvtVll04mEzHM4nFxICeAumrvUFoJDL2n2 Y0FCh09QWo6s8KjxwJGjGBj/8ZIPtlun4gqNAA== ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN NSEC3 ( 1 0 1 b5d235bba85cf6cc b71smce6m2e35t5l22o7a9u3gnmdgb49 NS SOA RRSIG DNSKEY NSEC3PARAM ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220822040047 20220815030047 55022 qatesttwai.gov. hANoLHUybTueweTPHimoDNbhxvBjqI4iXiUdXVue15UMDXegkEUgwqboFweYHht/n82VM0TWZmLw QRc7++BQtslfdgsPj43mwISJ2m54EE15YCj8e03gJ0byCTxf95bqs83rQy5jjqMQ0BDeA1IfcLcv pBvGCbioq8SAZ2Fy6nXc9oaUTaHKOxLOhpTqDLZE0e+1+KVqG4aaTmKxX5qyYpC9Fxl7dR8FIyt3 4aKGejhRlJEc/2HO2AxXARpOf8X2X6gzgbC2mizcR4+oLlSpGR3mvh/pgipHReLJTFb7w2E5biAY hinMBiZ+5fD5ZG1QENxkJdb4vpBkQCcCg3y45Q== ) b71smce6m2e35t5l22o7a9u3gnmdgb48.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220824113329 20220817103329 56372 qatesttwai.gov. HIm+DC7MYiCjD1eeBYxrj0LZjmpizHEPWqe3fRwEU2lchpexDnQg51ruwqe5jgxF9IJ3zwC4amPv HpPKCrYk9qbumMVfOsfrj9VOfqiO1391MfKDP/XiaxrKlXINWFqX9D7NhE3pSxn4UkjiqoUpngDi xfzoEh5esniRDI7Y6jQyx57Ik1oyu1HvprQpebevxXLAIo3+M1VuAuuwDEawGSeDC2nDIERF1YgJ MwgnL7KLWSwmtkbUTb7906rzJ4B+tNsr/RWHZTekCaaSVoBOkE8TF5Hew5k7cGhCig+5fozDJvlu JHnTDpa5gCzsGWlx9P3Ba0jVQKN20fE2+7FzZw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220822040047 20220815030047 55022 qatesttwai.gov. vSyGHv726vp9NP6gbo/QreGfbbGmeWfuNRcuyzqg74XARkEzA+dap49CYPZ026cX3XPBqBZ1/H7z KTD/+mYTVtbd6KS/Au8G4JqU8uBXS39og5T9dxZyDt//TcfOdYa087ANnuNiXcclnI0Yu/vgpWsi C4bxPt+V0TiQtMPcOkTQRFYxdWewqIVlAzjz2FOwZUXsprN4qmHaOKJ3IX9svVUX0g2es4ioF4AU V+iKqCwEiU8lfRoj8Ky1/RsV4i/E4Mpxw86QUm4cx4ZINOe1apfzG8ZgkIWeHxs8iHyNd0FbBjMG itm0i7IpVu+CIsO61KUDvw8NWUqoCKUH09OeOQ== )`
	`QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220824090200 20220817080200 56372 qatesttwai.gov. gqsqtZ7dh+tX1y3FGbd2DMbnkhZTKc5Ul3BOQhDHeeLuAKDPdufZXtu+5BSs97T8W5NxXswTWR5k wc9qzA8U0LR/XO81I+kuDCtG6NrT0sljhfVSRUacyj9Wv9VFWR+2wVaJbpi+v+EJeD52VL2wAsxT IsqMZc1cF/lpl0Dtgt5fbqckpoPG7DcJzPnBYlTE93iKTSn2s9nRlf7+og+tiSOCbZKfmRxnVZ3p MLzsy0rx6+nB5TlIKQTaM1wXAzSPsaL2OboMuZwHs/vvtVll04mEzHM4nFxICeAumrvUFoJDL2n2 Y0FCh09QWo6s8KjxwJGjGBj/8ZIPtlun4gqNAA== )`
	RRSIG=55022 and DNSKEY=55022 verifies the SOA RRset
	RRSIG=56372 and DNSKEY=56372 verifies the SOA RRset

QATESTTWAI.GOV

	Query to ns4.twai.GOV for QATESTTWAI.GOV/A
	Received 785 bytes from 199.169.196.64
	;; Response received from 199.169.196.64 (785 octets) ;; HEADER SECTION ;; id = 15618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) QATESTTWAI.GOV. 30 IN SOA ( ns3.twai.GOV. root.ns3.twai.GOV. 2021120101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220823001132 20220815231132 56372 qatesttwai.gov. GYAtgjPfLzm4ofQwqeQ8Y7cL2EfEBOk8RBhv0cnit9vDDITy6mUK4SuBxaNmb3KLWO7h29DfCbwC giDtUkPRSsw84roKzCEIKAQR8Lh9efgYUcedOplaMg+dmJF/hRjxlsmfAML/zAvc87HAiBJE8kII MZkllvn4NZ99jfK0uCkaNCRFG0HrbDgrnamifqDLjCHXvl+TEjc9tavqCjoTECN7N0XiNpNCjIn0 /Ea6SmJKxvYCa+GiE4VrvdrgCgyucbCwu6ahktAI+uz+skIabs9WBlbpFJw9IvvBmQTggsCv/HdM rNBIEmwojQxWYKKtBRKENYMfiISGahLzjgd8pQ== ) tidc0ob6idcvv73do56lcfgu3b812l50.QATESTTWAI.GOV. 3600 IN NSEC3 ( 1 0 1 648bb155f687117e tidc0ob6idcvv73do56lcfgu3b812l51 NS SOA RRSIG DNSKEY NSEC3PARAM ) tidc0ob6idcvv73do56lcfgu3b812l50.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220823001132 20220815231132 56372 qatesttwai.gov. NYeY1UanhWk/wry7Rw+acz+T+KKAw1dTrmajxKq6GLWxNf2vXmz/ChmT9gyJ/qsUzGtmo+SENaHS IIBLMXWdhyiDkrh6ot++UIu86laJvv9BFn2qeBusTXxzgCS0O8QXpRQxnY0owQ4XZ8LvNYvun2tv JB2+d9jJuBn38jBGTCT4Lf6ZooE0TyvhV3z4GP36OTVpz5Z84IIvLi4h5lBUR7XhfKt7EkaR4ra1 cJCEbolrMgxsjtO9ksXbGPogQcuwxLpnSrXVxnfcSmbkJWlmAHIazDOFIL6KT0tw3mLEHN3pkxGT oseIwehD+4oMPRsvy/LQuU6tAhFtXslKE8GJ0Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.twai.GOV is authoritative for QATESTTWAI.GOV
	Found RRSIG signed by qatesttwai.gov zone
	Query to ns4.twai.GOV for QATESTTWAI.GOV/A
	Received 785 bytes from 199.169.196.64
	;; Response received from 199.169.196.64 (785 octets) ;; HEADER SECTION ;; id = 41080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; QATESTTWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) QATESTTWAI.GOV. 30 IN SOA ( ns3.twai.GOV. root.ns3.twai.GOV. 2021120101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220823001132 20220815231132 56372 qatesttwai.gov. GYAtgjPfLzm4ofQwqeQ8Y7cL2EfEBOk8RBhv0cnit9vDDITy6mUK4SuBxaNmb3KLWO7h29DfCbwC giDtUkPRSsw84roKzCEIKAQR8Lh9efgYUcedOplaMg+dmJF/hRjxlsmfAML/zAvc87HAiBJE8kII MZkllvn4NZ99jfK0uCkaNCRFG0HrbDgrnamifqDLjCHXvl+TEjc9tavqCjoTECN7N0XiNpNCjIn0 /Ea6SmJKxvYCa+GiE4VrvdrgCgyucbCwu6ahktAI+uz+skIabs9WBlbpFJw9IvvBmQTggsCv/HdM rNBIEmwojQxWYKKtBRKENYMfiISGahLzjgd8pQ== ) qioqhbt5hias397kcl5tbhu6d8uerb1m.QATESTTWAI.GOV. 3600 IN NSEC3 ( 1 0 1 432fd26bb7ed4f4b qioqhbt5hias397kcl5tbhu6d8uerb1n NS SOA RRSIG DNSKEY NSEC3PARAM ) qioqhbt5hias397kcl5tbhu6d8uerb1m.QATESTTWAI.GOV. 3600 IN RRSIG ( NSEC3 7 3 3600 20220823001132 20220815231132 56372 qatesttwai.gov. SeAICUdMJmFt1eFAExDn9nyZTRzU/8pVJiRj1R/CjzbVlTLYs8NFGOPaICtn8jImGG1a3D+Vs09B /D1dcd3t0vKjqK6ofudOKwoPw8Ij+efOvBf1Ell1oKbG1uy+6GVz8eFf08Dz/md5qaws3w9ZxzhN oYOZAq3EKvVVXNbm7A59fZSECPq1AJFpI28FP1toNl1xskjgHt12ZiMp06ynY1OvzyH9wgdZRYTC +QtaBE6M49xLP+odq483AZPvgJNhRXgereto1gyicWDndfoJDtNeFOas/2a+qRTWh7SVo9cC/8Yw itWKYc7vkhWhFw/JYd6DF5VthAxod5z/d7PU0Q== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`QATESTTWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20220823001132 20220815231132 56372 qatesttwai.gov. GYAtgjPfLzm4ofQwqeQ8Y7cL2EfEBOk8RBhv0cnit9vDDITy6mUK4SuBxaNmb3KLWO7h29DfCbwC giDtUkPRSsw84roKzCEIKAQR8Lh9efgYUcedOplaMg+dmJF/hRjxlsmfAML/zAvc87HAiBJE8kII MZkllvn4NZ99jfK0uCkaNCRFG0HrbDgrnamifqDLjCHXvl+TEjc9tavqCjoTECN7N0XiNpNCjIn0 /Ea6SmJKxvYCa+GiE4VrvdrgCgyucbCwu6ahktAI+uz+skIabs9WBlbpFJw9IvvBmQTggsCv/HdM rNBIEmwojQxWYKKtBRKENYMfiISGahLzjgd8pQ== )`
	RRSIG=56372 and DNSKEY=56372 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test QATESTTWAI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: