DNSSEC Analyzer - TWAI.GOV

Domain Name:

Time: 2020-10-26 12:54:54 UTC, NTP stratum 4

Analyzing DNSSEC problems for TWAI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 32484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to k.root-servers.net for TWAI.GOV/A
	Received 663 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (663 bytes) ;; HEADER SECTION ;; id = 170 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 20841 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 12971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 13252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to a.gov-servers.net for TWAI.GOV/A
	Received 364 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (364 bytes) ;; HEADER SECTION ;; id = 40534 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TWAI.GOV. 86400 IN NS ns1.TWAI.GOV. TWAI.GOV. 86400 IN NS ns2.TWAI.GOV. TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. sxTj21qnEkW8SpUgbf3oW5DgsGUwKqn2twP8mcPu5B+1HxFWMgv6uTt50k5uCdFjLS9X1C2ITpl0 b/Jl5fD7YTE6yGqfaihoOJS771iv/37PzQK/GtL1+dh/xRbhhO2Wv5PMsGT/jlrq/RS1GIuQMcsv nKbC7lP9mVNckfemta/hDu4U+OtHY6n/wcnenD9AGqr0BeWE7Id4KR/6gQofkA== ) ;; ADDITIONAL SECTION (4 records) ns1.TWAI.GOV. 86400 IN A 199.169.194.28 ns2.TWAI.GOV. 86400 IN A 199.169.192.28 ns2.TWAI.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for TWAI.GOV/DNSKEY
	Received 364 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (364 bytes) ;; HEADER SECTION ;; id = 19413 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TWAI.GOV. 86400 IN NS ns1.TWAI.GOV. TWAI.GOV. 86400 IN NS ns2.TWAI.GOV. TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. sxTj21qnEkW8SpUgbf3oW5DgsGUwKqn2twP8mcPu5B+1HxFWMgv6uTt50k5uCdFjLS9X1C2ITpl0 b/Jl5fD7YTE6yGqfaihoOJS771iv/37PzQK/GtL1+dh/xRbhhO2Wv5PMsGT/jlrq/RS1GIuQMcsv nKbC7lP9mVNckfemta/hDu4U+OtHY6n/wcnenD9AGqr0BeWE7Id4KR/6gQofkA== ) ;; ADDITIONAL SECTION (4 records) ns1.TWAI.GOV. 86400 IN A 199.169.194.28 ns2.TWAI.GOV. 86400 IN A 199.169.192.28 ns2.TWAI.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TWAI.GOV

TWAI.GOV

	Checking DS between GOV and TWAI.GOV
	Query to d.gov-servers.net for TWAI.GOV/DS
	Received 268 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (268 bytes) ;; HEADER SECTION ;; id = 40256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DS ;; ANSWER SECTION (2 records) TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. sxTj21qnEkW8SpUgbf3oW5DgsGUwKqn2twP8mcPu5B+1HxFWMgv6uTt50k5uCdFjLS9X1C2ITpl0 b/Jl5fD7YTE6yGqfaihoOJS771iv/37PzQK/GtL1+dh/xRbhhO2Wv5PMsGT/jlrq/RS1GIuQMcsv nKbC7lP9mVNckfemta/hDu4U+OtHY6n/wcnenD9AGqr0BeWE7Id4KR/6gQofkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TWAI.GOV in the GOV zone
	DS=54471/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TWAI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. sxTj21qnEkW8SpUgbf3oW5DgsGUwKqn2twP8mcPu5B+1HxFWMgv6uTt50k5uCdFjLS9X1C2ITpl0 b/Jl5fD7YTE6yGqfaihoOJS771iv/37PzQK/GtL1+dh/xRbhhO2Wv5PMsGT/jlrq/RS1GIuQMcsv nKbC7lP9mVNckfemta/hDu4U+OtHY6n/wcnenD9AGqr0BeWE7Id4KR/6gQofkA== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=54471/SHA-1 is now in the chain-of-trust
	`TWAI.GOV. 3600 IN DS 54471 7 1 d152f973e8e31c2b039b2944284377cb22d0d97b`
	Query to ns2.TWAI.GOV for TWAI.GOV/DNSKEY
	Received 925 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (925 bytes) ;; HEADER SECTION ;; id = 15492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) TWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbJpXVYx6V5/gGXvG/mRiKusXpZ/L78/j9+Tcckdzyu7GbcfHMPWsDD3xacZLYcT4areNH3x NdjuT5owqxV+gAJKcW8fv+83O3bALXKUGZ85jCIJZaZbKMyolvT2sbFSylvrsI+KRuGpyf6R2TbJ 5ij6dPaLB9m2ElyeOUdbf9x7 ) ; Key ID = 12140 TWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcHt4kKP5s8KSDJ/h9nLURaaKgkDLDtC57PyHXe5yS4esRm/8S2PTEe6bFzvvsuglgnlwK+W 1EDrZcZbG2JewbCyim7KEgqbRsv5mo4jav+8V8xz1psrCHKSBkzw961Eie+rhsqRAIgnS8269cFL bJtzb3JQ7Qc3UJl3ZJZ2mR1+HKX2WrqY3reoCL2LpziU/Q+D8V0BEyjg0HUyUjHhGsE8wXEHVbiC BbZA2NsX7sx+hHndxWGbt8hTkqsv4lRUV3glcVyG5YUTvU4BIZN5FfiPxJ5Rs7on9T63fyC/1hH7 zPgOcnqYf8iccGgGOin8XK04VEgBGW1tkcGI3579PHc= ) ; Key ID = 54471 TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20201101135108 20201025135108 12140 twai.gov. h1wTvEGBeAs4XbU6+nuac5xixQWjZJ8VEY5E35MhCPQGAQ5/CQiPvJ372ZQ5848FF5OxLP1w56hc BqoF5syOa7MzWP6nKUZoiJFh3hnLZ95zmhIhSoMDZ8q+DX8Em3urDh3sLsGOw7ApMFjgjAdQvRLR 4Y00mxca4BUj99KeksY= ) TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20201101135108 20201025135108 54471 twai.gov. G8+k2rshbqe1BwTwa0+iairmjk5Fi7E0dajtwGwvrIqR7nh3MVGu0zuXfzMqBIWy0riizU0hPivd pTvR7ZrYWJPHA95lQdVF7GMU26sLgzzGUW6NLo+qpNpEKSo2xO2WjHJZ7GL19zTJqOm696wx5lYx tcgPRAVND+4yOf/IJNIpCdyP35VBFrFHAfJuUELNOI40MdSprxq9cMTPkaXU3SDiLwv6RAqYStfp n9IbnBckPGoc7PK9wpwDN3pLIG2xhdsHgdxCg3VAa4kCRdZ0rNXF7x6qbLBQAZtPkky/QiUdPCP+ Lsm54A1/eZTgJ2yqmZAFNMARBlI87Gspyi49gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for TWAI.GOV
	`TWAI.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbJpXVYx6V5/gGXvG/mRiKusXpZ/L78/j9+Tcckdzyu7GbcfHMPWsDD3xacZLYcT4areNH3x NdjuT5owqxV+gAJKcW8fv+83O3bALXKUGZ85jCIJZaZbKMyolvT2sbFSylvrsI+KRuGpyf6R2TbJ 5ij6dPaLB9m2ElyeOUdbf9x7 ) ; Key ID = 12140`
	`TWAI.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcHt4kKP5s8KSDJ/h9nLURaaKgkDLDtC57PyHXe5yS4esRm/8S2PTEe6bFzvvsuglgnlwK+W 1EDrZcZbG2JewbCyim7KEgqbRsv5mo4jav+8V8xz1psrCHKSBkzw961Eie+rhsqRAIgnS8269cFL bJtzb3JQ7Qc3UJl3ZJZ2mR1+HKX2WrqY3reoCL2LpziU/Q+D8V0BEyjg0HUyUjHhGsE8wXEHVbiC BbZA2NsX7sx+hHndxWGbt8hTkqsv4lRUV3glcVyG5YUTvU4BIZN5FfiPxJ5Rs7on9T63fyC/1hH7 zPgOcnqYf8iccGgGOin8XK04VEgBGW1tkcGI3579PHc= ) ; Key ID = 54471`
	DNSKEY=54471/SEP is now in the chain-of-trust
	DS=54471/SHA-1 verifies DNSKEY=54471/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20201101135108 20201025135108 12140 twai.gov. h1wTvEGBeAs4XbU6+nuac5xixQWjZJ8VEY5E35MhCPQGAQ5/CQiPvJ372ZQ5848FF5OxLP1w56hc BqoF5syOa7MzWP6nKUZoiJFh3hnLZ95zmhIhSoMDZ8q+DX8Em3urDh3sLsGOw7ApMFjgjAdQvRLR 4Y00mxca4BUj99KeksY= )`
	`TWAI.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20201101135108 20201025135108 54471 twai.gov. G8+k2rshbqe1BwTwa0+iairmjk5Fi7E0dajtwGwvrIqR7nh3MVGu0zuXfzMqBIWy0riizU0hPivd pTvR7ZrYWJPHA95lQdVF7GMU26sLgzzGUW6NLo+qpNpEKSo2xO2WjHJZ7GL19zTJqOm696wx5lYx tcgPRAVND+4yOf/IJNIpCdyP35VBFrFHAfJuUELNOI40MdSprxq9cMTPkaXU3SDiLwv6RAqYStfp n9IbnBckPGoc7PK9wpwDN3pLIG2xhdsHgdxCg3VAa4kCRdZ0rNXF7x6qbLBQAZtPkky/QiUdPCP+ Lsm54A1/eZTgJ2yqmZAFNMARBlI87Gspyi49gQ== )`
	RRSIG=12140 and DNSKEY=12140 verifies the DNSKEY RRset
	RRSIG=54471 and DNSKEY=54471/SEP verifies the DNSKEY RRset
	DNSKEY=12140 is now in the chain-of-trust
	Query to ns2.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1185 bytes) ;; HEADER SECTION ;; id = 3322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20201101215454 20201025215454 12140 twai.gov. fZNoSuII1djWYngUKwXvaZEmDhLBC2a3QScd1QkNOVLITPYSCXtVBH9Cw3cS6eE9+SL1pkn8q8om G0REDQ4NBDcvPwRyViUa7WHhYiowWoSi7cq9SrBgDsYF+RmRnq/ABbDRxJhVPiWUAOWpiqYlH3Ya kcGTw6VRPE9HdYeLacA= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20201101215046 20201025215046 12140 twai.gov. CtAtUoNBaOiWFtGvnc4Uj/Kjgs+Ya8JDb4EN2g1yL+/MXr3Fz3XhxLMTjw/TgGOtO78YkVIJ1rNG 9iyIIWxHUK6g7R0FLPBu9RjUvZ5YNUsZ+dAVCecPWD6m+/Qx8OMm/b2d1wORC6foCDwrvYDuxtUA bPn40PfBrfU33INSpPU= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215046 20201025215046 12140 twai.gov. FBupYcbwNrV8rrW0bn8IG5qBmyemBLB7hBOqXh3XhYm/jnBswv20FWsh6iQXq2fZ7tEDs463QPcY rAIbF5hvPpEh9MP7kARfLa+BqIcVcfNDLNNZdFqrx1fXaPP4REywmCBUHGV8/y6UoudePh1RTbsN ZYn7QWId+o0XP+YKVrw= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215046 20201025215046 12140 twai.gov. pP1LOG1nFvsJ9UaE9RpOH/jdJWnSzLj4+IfRzB/lDSLpZjrk/9zDjJPsJKuGwzueZQ/ldWi/HEG0 EyXQc8ZUe3+KJLuVOuctUUecVfV98UMbqYJESG6gPbdvX3X6P2ITxArdWhfnW2YpXUW0wOBiJRmx fHMpfg+5WQCnN5EuWpA= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215046 20201025215046 12140 twai.gov. hf6wCPPWWH1bdjvRjRLkUr0cqhyeRpnE2G8hVjLATnrigQOUzCVO8XP9rKEY7t2ojLQv5jpjhBRC EjWtlHJxFqVvxdxJ7WnUVGzYsn/MAf9+lt3W/fki2VGKvW3gFm6JCo6f/SblYA2zErZWD6UwkIVd dD4pENeRphR+vv3wCsk= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215046 20201025215046 12140 twai.gov. B/vddGaVdOY7epJNsZpqmdX8s6Pc0MDTPvSaeyQVJeF/oL3t+8Zyzc7XNSpNzhcrLTIsOs/VZ36P FkybOIYPFmAXTub3cv8KyGDXJf4r4gialj6R2yUp1TgfotsX1YxPvHnff1rLPSxDDC07+D48Iy7u tglwssQzTs5FJeHCZ8I= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TWAI.GOV is authoritative for TWAI.GOV
	Found RRSIG signed by twai.gov zone
	Query to ns1.TWAI.GOV for TWAI.GOV/SOA
	Received 1210 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1210 bytes) ;; HEADER SECTION ;; id = 54468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN SOA ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN SOA ( ns1.TWAI.GOV. root.ns1.TWAI.GOV. 2019073101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20201101215048 20201025215048 12140 twai.gov. nB0x+EVvav4zNK2S0r102XIE7M292Mp2KsfNsOCi0KWSrrQIBrvjHyGOsmisnBD+Evf5Ockc53y/ FRyU3PhocCDy3OOlKXDg/ZpDVEx0G6RI5MyfZI6yZhgU+EvfTaZh3ywmkvABNABcPPtLvJOxXzob ymrcU0oel9exSeuLvv0= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20201101215046 20201025215046 12140 twai.gov. CtAtUoNBaOiWFtGvnc4Uj/Kjgs+Ya8JDb4EN2g1yL+/MXr3Fz3XhxLMTjw/TgGOtO78YkVIJ1rNG 9iyIIWxHUK6g7R0FLPBu9RjUvZ5YNUsZ+dAVCecPWD6m+/Qx8OMm/b2d1wORC6foCDwrvYDuxtUA bPn40PfBrfU33INSpPU= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215046 20201025215046 12140 twai.gov. FBupYcbwNrV8rrW0bn8IG5qBmyemBLB7hBOqXh3XhYm/jnBswv20FWsh6iQXq2fZ7tEDs463QPcY rAIbF5hvPpEh9MP7kARfLa+BqIcVcfNDLNNZdFqrx1fXaPP4REywmCBUHGV8/y6UoudePh1RTbsN ZYn7QWId+o0XP+YKVrw= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215046 20201025215046 12140 twai.gov. pP1LOG1nFvsJ9UaE9RpOH/jdJWnSzLj4+IfRzB/lDSLpZjrk/9zDjJPsJKuGwzueZQ/ldWi/HEG0 EyXQc8ZUe3+KJLuVOuctUUecVfV98UMbqYJESG6gPbdvX3X6P2ITxArdWhfnW2YpXUW0wOBiJRmx fHMpfg+5WQCnN5EuWpA= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215046 20201025215046 12140 twai.gov. hf6wCPPWWH1bdjvRjRLkUr0cqhyeRpnE2G8hVjLATnrigQOUzCVO8XP9rKEY7t2ojLQv5jpjhBRC EjWtlHJxFqVvxdxJ7WnUVGzYsn/MAf9+lt3W/fki2VGKvW3gFm6JCo6f/SblYA2zErZWD6UwkIVd dD4pENeRphR+vv3wCsk= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215046 20201025215046 12140 twai.gov. B/vddGaVdOY7epJNsZpqmdX8s6Pc0MDTPvSaeyQVJeF/oL3t+8Zyzc7XNSpNzhcrLTIsOs/VZ36P FkybOIYPFmAXTub3cv8KyGDXJf4r4gialj6R2yUp1TgfotsX1YxPvHnff1rLPSxDDC07+D48Iy7u tglwssQzTs5FJeHCZ8I= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.TWAI.GOV for TWAI.GOV/SOA
	Received 1210 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1210 bytes) ;; HEADER SECTION ;; id = 28670 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN SOA ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN SOA ( ns1.TWAI.GOV. root.ns1.TWAI.GOV. 2019073101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TWAI.GOV. 30 IN RRSIG ( SOA 7 2 30 20201101215054 20201025215054 12140 twai.gov. buD8GdbMDXxS+UXH7/CIutY+MLgTncA976+P1qEdHi7lKMWBnPnTBicc5Ro0vgmzDahLIGH2rZNl QHyJxfy+OzbkRUTbSjPY8dmZyj07KDrXwcE57qQ+7FWfDoNLenXkibqx4im7F5GIwXqaOwKA/DHg DC/W00PtM3c6A/C5yqg= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20201101215046 20201025215046 12140 twai.gov. CtAtUoNBaOiWFtGvnc4Uj/Kjgs+Ya8JDb4EN2g1yL+/MXr3Fz3XhxLMTjw/TgGOtO78YkVIJ1rNG 9iyIIWxHUK6g7R0FLPBu9RjUvZ5YNUsZ+dAVCecPWD6m+/Qx8OMm/b2d1wORC6foCDwrvYDuxtUA bPn40PfBrfU33INSpPU= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215045 20201025215045 12140 twai.gov. I95a1XqoJgw3uatr8Sgc/vq+sL0+oXcd0VxbsNhaeFlI39UWYiv7nWTYzFKRBGMy7wAPTrG0Wlp2 VZVkKNDvB/MjGZaBJeWpyy+WYfgY0fIzKAf4bNHNF4/pKvdndUXNR6pWegr+Q3XfujfZ+qn39FLh yNVq9gAZcFLAAS3C9iY= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215045 20201025215045 12140 twai.gov. o4+bkZ4DThwGgwF3I8LpWurmdAtgrbcoL6PjJeox8vXBSdIxFEW8nYulKmaNI4ikGDwQP6P1k6AE 8cOPv1IxPz0l+eupIWMHBOavL8GSCZwlFIsj5gpWfJrMy6O83NpJBDFabVjbsDpMKLm6qcwSLvaJ 5uwyOJ+Fy0zhJtZWojM= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215045 20201025215045 12140 twai.gov. nzWSGVS7tVY0jJpoBNxbWFzndRlANe1ViG5faCAP7EZoeLoyn3XFVq2dZcdKDvh/31diPPsP9pZ+ B6AK+1FXt2ruF/jVWyof/n3TjZpwn8MR/5ONUeUFqLVceM0aEJPSD3XqVsmk2gjbkSYIVNgFGNGc yKJ2FftZ5nSrq/lAVBc= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215045 20201025215045 12140 twai.gov. QVzoecxbynmahqL1m4iNAvMr8HvtjJpop8gAELn55R/Mg+o7eFvJJ/MS8tT9IHToCtJva0Pb8djV ifuZnNu0q0Cx0wcXp6GbxmeS7eEunWVRi/GFM/ZabNFuR4sDPedSR/FO2mHmIs1nDjYCT3HVxrOZ adMoc3D5eUtFk/fDvT8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.TWAI.GOV for TWAI.GOV/A
	Received 1185 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1185 bytes) ;; HEADER SECTION ;; id = 10315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TWAI.GOV. IN A ;; ANSWER SECTION (2 records) TWAI.GOV. 30 IN A 199.169.192.121 TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20201101215747 20201025215747 12140 twai.gov. nD8/If5Y4ENG5yFdhm3+L7InF81LCHiuIMtd1rRxTMczGZl4+p/TcLeHIfNyMgD06J9bEJDnaUG+ Hrjb9bl58Q0OpvW/yEHW3C5CVTYhpBeA/3FbMq7G/qFCFnRilb2GQBtGc0mF6B/PXgiuFt5Cqf4S daQrEa4um7gZ/RtySBQ= ) ;; AUTHORITY SECTION (3 records) TWAI.GOV. 30 IN NS ns2.TWAI.GOV. TWAI.GOV. 30 IN NS ns1.TWAI.GOV. TWAI.GOV. 30 IN RRSIG ( NS 7 2 30 20201101215046 20201025215046 12140 twai.gov. CtAtUoNBaOiWFtGvnc4Uj/Kjgs+Ya8JDb4EN2g1yL+/MXr3Fz3XhxLMTjw/TgGOtO78YkVIJ1rNG 9iyIIWxHUK6g7R0FLPBu9RjUvZ5YNUsZ+dAVCecPWD6m+/Qx8OMm/b2d1wORC6foCDwrvYDuxtUA bPn40PfBrfU33INSpPU= ) ;; ADDITIONAL SECTION (9 records) ns1.TWAI.GOV. 30 IN A 199.169.194.28 ns1.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215045 20201025215045 12140 twai.gov. I95a1XqoJgw3uatr8Sgc/vq+sL0+oXcd0VxbsNhaeFlI39UWYiv7nWTYzFKRBGMy7wAPTrG0Wlp2 VZVkKNDvB/MjGZaBJeWpyy+WYfgY0fIzKAf4bNHNF4/pKvdndUXNR6pWegr+Q3XfujfZ+qn39FLh yNVq9gAZcFLAAS3C9iY= ) ns2.TWAI.GOV. 30 IN A 199.169.192.28 ns2.TWAI.GOV. 30 IN RRSIG ( A 7 3 30 20201101215045 20201025215045 12140 twai.gov. o4+bkZ4DThwGgwF3I8LpWurmdAtgrbcoL6PjJeox8vXBSdIxFEW8nYulKmaNI4ikGDwQP6P1k6AE 8cOPv1IxPz0l+eupIWMHBOavL8GSCZwlFIsj5gpWfJrMy6O83NpJBDFabVjbsDpMKLm6qcwSLvaJ 5uwyOJ+Fy0zhJtZWojM= ) ns1.TWAI.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215045 20201025215045 12140 twai.gov. nzWSGVS7tVY0jJpoBNxbWFzndRlANe1ViG5faCAP7EZoeLoyn3XFVq2dZcdKDvh/31diPPsP9pZ+ B6AK+1FXt2ruF/jVWyof/n3TjZpwn8MR/5ONUeUFqLVceM0aEJPSD3XqVsmk2gjbkSYIVNgFGNGc yKJ2FftZ5nSrq/lAVBc= ) ns2.TWAI.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.TWAI.GOV. 30 IN RRSIG ( AAAA 7 3 30 20201101215045 20201025215045 12140 twai.gov. QVzoecxbynmahqL1m4iNAvMr8HvtjJpop8gAELn55R/Mg+o7eFvJJ/MS8tT9IHToCtJva0Pb8djV ifuZnNu0q0Cx0wcXp6GbxmeS7eEunWVRi/GFM/ZabNFuR4sDPedSR/FO2mHmIs1nDjYCT3HVxrOZ adMoc3D5eUtFk/fDvT8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TWAI.GOV A RR has value 199.169.192.121
	Found 1 RRSIGs over A RRset
	`TWAI.GOV. 30 IN RRSIG ( A 7 2 30 20201101215747 20201025215747 12140 twai.gov. nD8/If5Y4ENG5yFdhm3+L7InF81LCHiuIMtd1rRxTMczGZl4+p/TcLeHIfNyMgD06J9bEJDnaUG+ Hrjb9bl58Q0OpvW/yEHW3C5CVTYhpBeA/3FbMq7G/qFCFnRilb2GQBtGc0mF6B/PXgiuFt5Cqf4S daQrEa4um7gZ/RtySBQ= )`
	RRSIG=12140 and DNSKEY=12140 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TWAI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: