DNSSEC Analyzer - TWAI.GOV

Domain Name:

Time: 2021-04-22 02:10:30 UTC, NTP stratum 4

Analyzing DNSSEC problems for TWAI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 30620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to f.root-servers.net for TWAI.GOV/A
	Received 627 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (627 bytes) ;; HEADER SECTION ;; id = 53720 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (622 bytes) ;; HEADER SECTION ;; id = 27304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (367 bytes) ;; HEADER SECTION ;; id = 43915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 63382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to d.gov-servers.net for TWAI.GOV/A
	Received 364 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (364 bytes) ;; HEADER SECTION ;; id = 30258 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TWAI.GOV. 86400 IN NS ns1.TWAI.GOV. TWAI.GOV. 86400 IN NS ns2.TWAI.GOV. TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. G2MdJ6564E0iTGibjLDu0A+D4OPEsmsDafE/RvhDNdbZHmrIShrKOdpiUeWY0ahuwLDajtc4g6s1 mBCQHv96fLk2fDU3FMF/KxjW3jLhhfiwv4TPDERO/RzLXDazA+uhladZOasLIadLnGAvLb8jtTGj D+btceWG5626uSLN/Z6ZXY48U/rFySoHYfaJs35JgONBKSbIIdDJ0HlWDNVrsQ== ) ;; ADDITIONAL SECTION (4 records) ns1.TWAI.GOV. 86400 IN A 199.169.194.28 ns2.TWAI.GOV. 86400 IN A 199.169.192.28 ns2.TWAI.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for TWAI.GOV/DNSKEY
	Received 364 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (364 bytes) ;; HEADER SECTION ;; id = 23244 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TWAI.GOV. 86400 IN NS ns1.TWAI.GOV. TWAI.GOV. 86400 IN NS ns2.TWAI.GOV. TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. G2MdJ6564E0iTGibjLDu0A+D4OPEsmsDafE/RvhDNdbZHmrIShrKOdpiUeWY0ahuwLDajtc4g6s1 mBCQHv96fLk2fDU3FMF/KxjW3jLhhfiwv4TPDERO/RzLXDazA+uhladZOasLIadLnGAvLb8jtTGj D+btceWG5626uSLN/Z6ZXY48U/rFySoHYfaJs35JgONBKSbIIdDJ0HlWDNVrsQ== ) ;; ADDITIONAL SECTION (4 records) ns1.TWAI.GOV. 86400 IN A 199.169.194.28 ns2.TWAI.GOV. 86400 IN A 199.169.192.28 ns2.TWAI.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TWAI.GOV

TWAI.GOV

	Checking DS between GOV and TWAI.GOV
	Query to a.gov-servers.net for TWAI.GOV/DS
	Received 268 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (268 bytes) ;; HEADER SECTION ;; id = 44349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DS ;; ANSWER SECTION (2 records) TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. G2MdJ6564E0iTGibjLDu0A+D4OPEsmsDafE/RvhDNdbZHmrIShrKOdpiUeWY0ahuwLDajtc4g6s1 mBCQHv96fLk2fDU3FMF/KxjW3jLhhfiwv4TPDERO/RzLXDazA+uhladZOasLIadLnGAvLb8jtTGj D+btceWG5626uSLN/Z6ZXY48U/rFySoHYfaJs35JgONBKSbIIdDJ0HlWDNVrsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TWAI.GOV in the GOV zone
	DS=54471/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210428231008 20210421231008 48498 gov. G2MdJ6564E0iTGibjLDu0A+D4OPEsmsDafE/RvhDNdbZHmrIShrKOdpiUeWY0ahuwLDajtc4g6s1 mBCQHv96fLk2fDU3FMF/KxjW3jLhhfiwv4TPDERO/RzLXDazA+uhladZOasLIadLnGAvLb8jtTGj D+btceWG5626uSLN/Z6ZXY48U/rFySoHYfaJs35JgONBKSbIIdDJ0HlWDNVrsQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=54471/SHA-1 is now in the chain-of-trust
	`TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b`
	Query to ns1.TWAI.GOV for TWAI.GOV/DNSKEY
	Received 925 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (925 bytes) ;; HEADER SECTION ;; id = 17073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) TWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaPVXgpkiwZLKlckV0kIn0bOTF8+jMeJVmlwND8k0/DgDs/OxDyfnSopOzQJYupb82qTyFwb pJ0arSU5hacAZg7+MLxOfG8rGeywp9PmfwVn39xptK+yb0jeF0P765ZSmPPf25hJP4i+Bp+IfNat DhMyZFK5cy0Hvrrv0cYH4tEh ) ; Key ID = 31499 TWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcHt4kKP5s8KSDJ/h9nLURaaKgkDLDtC57PyHXe5yS4esRm/8S2PTEe6bFzvvsuglgnlwK+W 1EDrZcZbG2JewbCyim7KEgqbRsv5mo4jav+8V8xz1psrCHKSBkzw961Eie+rhsqRAIgnS8269cFL bJtzb3JQ7Qc3UJl3ZJZ2mR1+HKX2WrqY3reoCL2LpziU/Q+D8V0BEyjg0HUyUjHhGsE8wXEHVbiC BbZA2NsX7sx+hHndxWGbt8hTkqsv4lRUV3glcVyG5YUTvU4BIZN5FfiPxJ5Rs7on9T63fyC/1hH7 zPgOcnqYf8iccGgGOin8XK04VEgBGW1tkcGI3579PHc= ) ; Key ID = 54471 TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210427073117 20210420073117 31499 twai.gov. DkXWFPGKL98qdfdfoC54o9TLrAn+ONkf+0OuzsU8hQw2TM9tesKLHP1vYnBZQrwWfnvCdQ+z31b8 HMLkNFQh7GqybNDK/zd9qOx1CwZ96dZmFt9p3Nmv0Lh4It+G801MHVQntQTl1mZ+bl4YjhnVp3F4 eOx3wsQCmsCUeXUSsbQ= ) TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210427073117 20210420073117 54471 twai.gov. TGAxnJGY3OCcR2SUyVqeoVQC7sSxjwmPb9Z6WhK6BZF3bSiftud+mWr8uopKXv//VukKIFEb7+eU JpPTflLhg5QPalcwTIn1HU65LpsOPdh1E5BdIiwJuAjse3OtTsBuPhrsoBWrKuZF/T5TPV/vLobK BbWAYJEWBEi2FI1XMxbbYhO6lbJK8INWjQIbtwXi5z2qJaKr6uXtbLodVwqbMSxa9FFNfd15LCmK kKzfrzsR23i7WeLa7gGll0Y/JDsFDnnrnJUBFL1GxW+Me9+8dyl3Vl0x1INAfvRFkc0RgdIeJcwa 6KId8J8wObypcCFfO6OC5VE+TsopWpv2gLO3vg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for TWAI.GOV
	`TWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAaPVXgpkiwZLKlckV0kIn0bOTF8+jMeJVmlwND8k0/DgDs/OxDyfnSopOzQJYupb82qTyFwb pJ0arSU5hacAZg7+MLxOfG8rGeywp9PmfwVn39xptK+yb0jeF0P765ZSmPPf25hJP4i+Bp+IfNat DhMyZFK5cy0Hvrrv0cYH4tEh ) ; Key ID = 31499`
	`TWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcHt4kKP5s8KSDJ/h9nLURaaKgkDLDtC57PyHXe5yS4esRm/8S2PTEe6bFzvvsuglgnlwK+W 1EDrZcZbG2JewbCyim7KEgqbRsv5mo4jav+8V8xz1psrCHKSBkzw961Eie+rhsqRAIgnS8269cFL bJtzb3JQ7Qc3UJl3ZJZ2mR1+HKX2WrqY3reoCL2LpziU/Q+D8V0BEyjg0HUyUjHhGsE8wXEHVbiC BbZA2NsX7sx+hHndxWGbt8hTkqsv4lRUV3glcVyG5YUTvU4BIZN5FfiPxJ5Rs7on9T63fyC/1hH7 zPgOcnqYf8iccGgGOin8XK04VEgBGW1tkcGI3579PHc= ) ; Key ID = 54471`
	DNSKEY=54471/SEP is now in the chain-of-trust
	DS=54471/SHA-1 verifies DNSKEY=54471/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210427073117 20210420073117 31499 twai.gov. DkXWFPGKL98qdfdfoC54o9TLrAn+ONkf+0OuzsU8hQw2TM9tesKLHP1vYnBZQrwWfnvCdQ+z31b8 HMLkNFQh7GqybNDK/zd9qOx1CwZ96dZmFt9p3Nmv0Lh4It+G801MHVQntQTl1mZ+bl4YjhnVp3F4 eOx3wsQCmsCUeXUSsbQ= )`
	`TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210427073117 20210420073117 54471 twai.gov. TGAxnJGY3OCcR2SUyVqeoVQC7sSxjwmPb9Z6WhK6BZF3bSiftud+mWr8uopKXv//VukKIFEb7+eU JpPTflLhg5QPalcwTIn1HU65LpsOPdh1E5BdIiwJuAjse3OtTsBuPhrsoBWrKuZF/T5TPV/vLobK BbWAYJEWBEi2FI1XMxbbYhO6lbJK8INWjQIbtwXi5z2qJaKr6uXtbLodVwqbMSxa9FFNfd15LCmK kKzfrzsR23i7WeLa7gGll0Y/JDsFDnnrnJUBFL1GxW+Me9+8dyl3Vl0x1INAfvRFkc0RgdIeJcwa 6KId8J8wObypcCFfO6OC5VE+TsopWpv2gLO3vg== )`
	RRSIG=31499 and DNSKEY=31499 verifies the DNSKEY RRset
	RRSIG=54471 and DNSKEY=54471/SEP verifies the DNSKEY RRset
	DNSKEY=31499 is now in the chain-of-trust
	Query to ns2.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1185 bytes) ;; HEADER SECTION ;; id = 41917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154006 20210420154006 31499 twai.gov. Kmon9zhQVPPy217zd2XK1zKZMwt3Gw+DJznAhgrwyjgIlzM3W4/nkcAWiKGrAqiD835jQgXnqRry zoW45aijNhqjDlUWpkMQwY4XZ/G6KEl8/gukD8LgVZH+4tYSVifHNYKex8/+WvBnP40ebpzS2YfZ lld46ZzImfeR5XBxtSY= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20210427153119 20210420153119 31499 twai.gov. AvBkNXXsqX06Nbh2L3ihXuLf0eqLux1+k1eOGyo9Q1ATqhF3kvh4EaFlwLDlcOZvherfed75dKbw 4jcvnPyDnZE4UeZamx3pOHMFMXmTeXnQMtxeGtAQ9P2iTSYdwVuJV6+yt9WicqaZ1xv4RyTY5Soj EqXHT4CYadUA1OGXAd0= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153119 20210420153119 31499 twai.gov. cALpyWNDG+cZM4IMGG6PH+ok5SgR62baai6z8sOqnCtvV+MMFGgeNsGElDFfOIySFsxdTZjZmOLp fKb8Iezl0g1htqWJbeaAjhV0Lt/0AstmJZfRBivWtZ+OKrTvlP8/04m8c2cLi1VvmahkxMWWk+K/ 0u3uhpgW+0qv2OJNpQk= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153119 20210420153119 31499 twai.gov. E/yPU4zoiiEK0yViEPhh7XfPXoJt+yuk1rIwaYd8ENRKiMw+E8Ij1KTLARsb6NNwUIgHnN8npIw6 lXyUrlCTimhy3S7mPvnTuw9fNmfyBaNpFy+HxocNpZH7w+NWdgXIfq9gfW29LEp5/7SK5O5Z/mHv nE1b1044ZgLhkKVfaLA= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153119 20210420153119 31499 twai.gov. fSgdQh8orE/ARvAT+DKsKON0j6FG+o4LphBDcGrWj7hh7GVId9fPuyIKhnSE7YcvEePYkp6fqwtD y5iau8znTLeoDtUrMOoAG0rDD6ruU26PIap/OLInLdSkcDWWnoPp/+JFqjGTeTWKnZ9acQFtPx57 lR0N834F83GxHKHIVYw= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153119 20210420153119 31499 twai.gov. mlBBjIRVhnIfNTnbjvTBdJTiwpzKlCe96fd88Zfue3csGpidvYjxDG35ei0IvW93tvUjuev66Y8k kfgUL6TuA3X7eXJzpSi7b0tJ8Nav4gzygrzoJ+PTQcp3tOS2x4EsF8UQbO4NIpu97FgYMngc0N0+ YUG25r2Ubo/B9PU+Nrk= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.TWAI.GOV is authoritative for TWAI.GOV
	Found RRSIG signed by twai.gov zone
	Query to ns1.TWAI.GOV for TWAI.GOV/SOA
	Received 1210 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1210 bytes) ;; HEADER SECTION ;; id = 21107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN SOA ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN SOA ( ns1.TWAI.GOV. root.ns1.TWAI.GOV. 2021020301 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20210427153124 20210420153124 31499 twai.gov. dW5dz89ojewlEcWpkPPu00Jbr+A7ocRaf2/YcHyRxv90DQVhOMxCacXFtGTlKraYEK82HDE6ulut vtVWRkbJ4/6KVMjRwrVDyOuEJHWOG0vCdX+VEzJDGawQilhK1BNVbiLkyp2uzRKykWdradXrcmIj y8AybsdvsXK+tArUKhY= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20210427153120 20210420153120 31499 twai.gov. BRNGMpAn/c29Jtlen8B9MnRL7mP5ByEkU8ueDhDfzIJ40KKP7e/e6sBadTy4RX/OH7Hv3ENwQTZ8 xoYmU6ZAPa+KdpqzhqhPGXKGtwHrSazS5ib520+1C/lvPJUV0ERqU1bvY3vkOqV/GzNOdmopPHhb 268L0CVFke5qu5tZd0U= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153120 20210420153120 31499 twai.gov. cDgX4IeupiJ1NGJNE5Ru/diC3uQnOq3Y+qzQrRD2t7JI3PukQGXjIXeIErXN1mamdg9X4HMMx0ul UJu3C8rT60ByXhfl1pP0LD5TMHv8i7fgCFZbYlhuwNNeE/oD667f2AY+AbmgQkfn6Ki3DS8dpBOi G7dPL1iVtwUP7+FTY2I= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153120 20210420153120 31499 twai.gov. VfnHJRq7RGKE/Mksp/SELIxoTN5Kn5fnELW9dPta+b87/FCa2X/c3fs6QUDDSSWPnYEgz+fDHOX6 wNNYQqDCCwF4a/DoHb3iDUBjV9vdLOUSp88kwspsff185eMkeELBULs6Zcf+LxaeRzt0RiIFy1Bs aQVNAOTeMrOgEiVCc2k= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153120 20210420153120 31499 twai.gov. csB4rD4tt7qw6jxn5+yuA9kUYkrV+MdEKKz8JpKmGyLv0fOdZD0Ud53/olMyvPsKOAtg7KyJXXMm dMjqGDwKpQxXL5tEKcz0Z0eSdHs1sI7P8LtAppFwRDi1hDDsYi+6FdJdCAvo6F5LwfHrVn8ct+CW 8dc4iOx3u/LeDA0Pz+E= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153120 20210420153120 31499 twai.gov. N5m2nA7WNaH+yj59tsm4T2cyTZjkz46fPO6iwT3helSwg6dOudpysb4rX4bZlek1dd43I7r7znYK FWpPI+/Ie6f8M6rM+0oKkOO5uVjKKU+nTI9SQhRwOTu7c/VDwJjL7dCodWTXLnj7yLM8nQE9NHLR tzraJDDzCUUeMr5QVZY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1185 bytes) ;; HEADER SECTION ;; id = 43642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154130 20210420154130 31499 twai.gov. gerzngji+NDo5PvXf6vPwK/M9ysLEK32NE8vr4OErjaf2Vl/cbqXOJfzDIr/vnvBu4NTNpIzkRH/ lzANGx6jlCtpVAhS35DiOPWZOlpvomr6l4SH4PD2RnSrpLRwUcLB1D3irq61HUHGCYuCvVk3CVht s1gMe6RJKC1Txv8ZmR8= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20210427153119 20210420153119 31499 twai.gov. AvBkNXXsqX06Nbh2L3ihXuLf0eqLux1+k1eOGyo9Q1ATqhF3kvh4EaFlwLDlcOZvherfed75dKbw 4jcvnPyDnZE4UeZamx3pOHMFMXmTeXnQMtxeGtAQ9P2iTSYdwVuJV6+yt9WicqaZ1xv4RyTY5Soj EqXHT4CYadUA1OGXAd0= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153119 20210420153119 31499 twai.gov. cALpyWNDG+cZM4IMGG6PH+ok5SgR62baai6z8sOqnCtvV+MMFGgeNsGElDFfOIySFsxdTZjZmOLp fKb8Iezl0g1htqWJbeaAjhV0Lt/0AstmJZfRBivWtZ+OKrTvlP8/04m8c2cLi1VvmahkxMWWk+K/ 0u3uhpgW+0qv2OJNpQk= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153119 20210420153119 31499 twai.gov. E/yPU4zoiiEK0yViEPhh7XfPXoJt+yuk1rIwaYd8ENRKiMw+E8Ij1KTLARsb6NNwUIgHnN8npIw6 lXyUrlCTimhy3S7mPvnTuw9fNmfyBaNpFy+HxocNpZH7w+NWdgXIfq9gfW29LEp5/7SK5O5Z/mHv nE1b1044ZgLhkKVfaLA= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153119 20210420153119 31499 twai.gov. fSgdQh8orE/ARvAT+DKsKON0j6FG+o4LphBDcGrWj7hh7GVId9fPuyIKhnSE7YcvEePYkp6fqwtD y5iau8znTLeoDtUrMOoAG0rDD6ruU26PIap/OLInLdSkcDWWnoPp/+JFqjGTeTWKnZ9acQFtPx57 lR0N834F83GxHKHIVYw= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153119 20210420153119 31499 twai.gov. mlBBjIRVhnIfNTnbjvTBdJTiwpzKlCe96fd88Zfue3csGpidvYjxDG35ei0IvW93tvUjuev66Y8k kfgUL6TuA3X7eXJzpSi7b0tJ8Nav4gzygrzoJ+PTQcp3tOS2x4EsF8UQbO4NIpu97FgYMngc0N0+ YUG25r2Ubo/B9PU+Nrk= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TWAI.GOV A RR has value 199.169.192.121
	Found 1 RRSIGs over A RRset
	`TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154130 20210420154130 31499 twai.gov. gerzngji+NDo5PvXf6vPwK/M9ysLEK32NE8vr4OErjaf2Vl/cbqXOJfzDIr/vnvBu4NTNpIzkRH/ lzANGx6jlCtpVAhS35DiOPWZOlpvomr6l4SH4PD2RnSrpLRwUcLB1D3irq61HUHGCYuCvVk3CVht s1gMe6RJKC1Txv8ZmR8= )`
	RRSIG=31499 and DNSKEY=31499 verifies the A RRset

TWAI.GOV

	Query to ns1.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1185 bytes) ;; HEADER SECTION ;; id = 29744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154502 20210420154502 31499 twai.gov. n0XbzQvz+U9VM06AlkJ4+zl0hcHm/qE5gye+KJOAvLDsdPruIkE0Z6rkV8upz/IfJDmwYln57qAI yBGH7oiMQ45vm6UaKnDbZR1YaNH1VYaat4ATTIjDC4fFha7IkI2euo3l3ogfl1aeYAomlsQiTf4G SjkKWvccfB/PCL3Kw+g= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20210427153120 20210420153120 31499 twai.gov. BRNGMpAn/c29Jtlen8B9MnRL7mP5ByEkU8ueDhDfzIJ40KKP7e/e6sBadTy4RX/OH7Hv3ENwQTZ8 xoYmU6ZAPa+KdpqzhqhPGXKGtwHrSazS5ib520+1C/lvPJUV0ERqU1bvY3vkOqV/GzNOdmopPHhb 268L0CVFke5qu5tZd0U= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153120 20210420153120 31499 twai.gov. cDgX4IeupiJ1NGJNE5Ru/diC3uQnOq3Y+qzQrRD2t7JI3PukQGXjIXeIErXN1mamdg9X4HMMx0ul UJu3C8rT60ByXhfl1pP0LD5TMHv8i7fgCFZbYlhuwNNeE/oD667f2AY+AbmgQkfn6Ki3DS8dpBOi G7dPL1iVtwUP7+FTY2I= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153120 20210420153120 31499 twai.gov. VfnHJRq7RGKE/Mksp/SELIxoTN5Kn5fnELW9dPta+b87/FCa2X/c3fs6QUDDSSWPnYEgz+fDHOX6 wNNYQqDCCwF4a/DoHb3iDUBjV9vdLOUSp88kwspsff185eMkeELBULs6Zcf+LxaeRzt0RiIFy1Bs aQVNAOTeMrOgEiVCc2k= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153120 20210420153120 31499 twai.gov. csB4rD4tt7qw6jxn5+yuA9kUYkrV+MdEKKz8JpKmGyLv0fOdZD0Ud53/olMyvPsKOAtg7KyJXXMm dMjqGDwKpQxXL5tEKcz0Z0eSdHs1sI7P8LtAppFwRDi1hDDsYi+6FdJdCAvo6F5LwfHrVn8ct+CW 8dc4iOx3u/LeDA0Pz+E= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153120 20210420153120 31499 twai.gov. N5m2nA7WNaH+yj59tsm4T2cyTZjkz46fPO6iwT3helSwg6dOudpysb4rX4bZlek1dd43I7r7znYK FWpPI+/Ie6f8M6rM+0oKkOO5uVjKKU+nTI9SQhRwOTu7c/VDwJjL7dCodWTXLnj7yLM8nQE9NHLR tzraJDDzCUUeMr5QVZY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.TWAI.GOV is authoritative for TWAI.GOV
	Found RRSIG signed by twai.gov zone
	Query to ns1.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1185 bytes) ;; HEADER SECTION ;; id = 51756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154302 20210420154302 31499 twai.gov. QpZncxO2cCm5n4AcW798Nrn3YoN3NH1gaQvXun5rayaZcRoRsgt5rFmKDG9Tus0aTYtadJNkVBNM WEXlsdwX0EJUPO68S14HioixLUb6hBIxig/9NzwItcs6xgg4Ioiztl+DQTd3/W12yUgsiERxqS6e R5wcXDVj38Ol0XGaGJ8= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20210427153121 20210420153121 31499 twai.gov. lHpYl5b5iRil9E8757uDQgLk4tY/UkwWOeNjgVw6fvwtwO+1eYOJjpm383d3pau6fRxewnqQGS2K FdMOGkjSB7Mzgu54IWtpn0RyvMg3e/HJOnItJOeXO20K2MeTlimlZrmEi03VALuHQf0YgUdIRMYf Glrse0Yzg7HzSAXOEto= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153121 20210420153121 31499 twai.gov. QeqQWFinWHkxUwE01GEjBCBNOwSMq5zwS/4WVEe0FJcAmA6L+4tCmtaXASpYAEWYvGB39VwJ/9VG HGNkHGN+asyVZLpOodCJkHFTI0pfuP2x9utU6DN4VsrpioMaWXK4C5Fe4TRTQ8tq1JhWHXpN28ss otu7AgDUkmMpTmXswII= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20210427153121 20210420153121 31499 twai.gov. g7MnyoqqMYeyHMOeVGZOH/qgVd2AxjokEFigAb4T4UfHtJRuWWa/18INPWtp+itJckZmh9t/P16v bW+i+Hhg3yyQAPJkfdfnnyTrksSYqdMEOoxAqQWAZd2trkoV/RWDWmN18d5HYTEzrN87zjIEsGAA s8PNeLDDyLx1iv571jc= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153121 20210420153121 31499 twai.gov. mFyLj2LZkI9igyzF8ICOhUn2H8PLsGv0HCkTZWWKYPFsbsonqsY7ZPdX0KANHQYMfSsDQRyV5H3d MKDaE5PYdfQP1HAb2p7UpsJoDTcOPZgGkmHisW4vS0z7W+qF3gz1svzQxDT2b5op9iOI1qt+0Pmc Y/Oy69zfnme4RiQOs28= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210427153121 20210420153121 31499 twai.gov. B4fqRYnS4Uqn+4f4rhSlnkI/u4ly3nE5r9QLrAkyvutrVYhEKrWOw2P7ce9Dps8AIAr2DwOMoK+p enWHzjzcIfsC6+oNl89CtGjvlkkDU63fZRscgTa/5+WoKPSsFveMxSJrqtK/cKNpnRkL/DWEJLvP MQryz/mLKD1MuLdJfOo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TWAI.GOV A RR has value 199.169.192.121
	Found 1 RRSIGs over A RRset
	`TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20210427154302 20210420154302 31499 twai.gov. QpZncxO2cCm5n4AcW798Nrn3YoN3NH1gaQvXun5rayaZcRoRsgt5rFmKDG9Tus0aTYtadJNkVBNM WEXlsdwX0EJUPO68S14HioixLUb6hBIxig/9NzwItcs6xgg4Ioiztl+DQTd3/W12yUgsiERxqS6e R5wcXDVj38Ol0XGaGJ8= )`
	RRSIG=31499 and DNSKEY=31499 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TWAI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: