DNSSEC Debugger - decoheim.co.kr

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-06 07:25:23 UTC

Analyzing DNSSEC problems for decoheim.co.kr

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 1139 octets ;; HEADER SECTION ;; id = 1870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to a.root-servers.net for decoheim.co.kr/A
	Received 686 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 686 octets ;; HEADER SECTION ;; id = 29475 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) kr. 172800 IN NS c.dns.kr. kr. 172800 IN NS e.dns.kr. kr. 172800 IN NS d.dns.kr. kr. 172800 IN NS g.dns.kr. kr. 172800 IN NS f.dns.kr. kr. 172800 IN NS b.dns.kr. kr. 86400 IN DS ( 64641 13 2 5ce9e65d92dca71755a778ab80f8d6c57053aea6cd57cb6b28b0a0581ce852dc ) kr. 86400 IN RRSIG ( DS 8 1 86400 20261119050000 20261106040000 8763 . dA/DoS2cOZXLHcNqUvJfp9hKWqSenvmpax1S3IPNiWcIVK5rLM1aNQasH+kWh0M+yd4uBl/4+FbO Rh1mD0EivAQ8ib0xMtW3R44wGXkkHIhi4qXBDH/D3TxOVb96EKzFxNQyPUrcoVhvoIR9MciD3goo n1UujRyxbb9b6Zaht1ZpPjDQBKsUGLd0Pn4RWy1kFIuUXnGfx3ZZiZSleB+XGa4J61T5H8zmqVeT 4makDGMgnXvshhraMJ6ubTmiYDaIb44uRKzM8E3MrdBoj9/vwtAPDNeKved5yTABzQ5At08fgEfC IBueQTzgGvqyAsnkurT2PzzxJBzkN0scZ5gr8w== ) ;; ADDITIONAL SECTION (11 records) c.dns.kr. 172800 IN A 210.101.61.1 e.dns.kr. 172800 IN A 202.30.124.100 e.dns.kr. 172800 IN AAAA 2001:dcc:5::100 d.dns.kr. 172800 IN A 203.83.159.1 d.dns.kr. 172800 IN AAAA 2001:dcc:4::1 g.dns.kr. 172800 IN A 202.31.190.1 g.dns.kr. 172800 IN AAAA 2001:dc5:a::1 f.dns.kr. 172800 IN A 210.101.62.1 f.dns.kr. 172800 IN AAAA 2001:dcc:6::1 b.dns.kr. 172800 IN A 210.101.60.1 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for kr/DNSKEY
	Received 674 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 674 octets ;; HEADER SECTION ;; id = 24410 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) kr. 172800 IN NS c.dns.kr. kr. 172800 IN NS e.dns.kr. kr. 172800 IN NS d.dns.kr. kr. 172800 IN NS g.dns.kr. kr. 172800 IN NS f.dns.kr. kr. 172800 IN NS b.dns.kr. kr. 86400 IN DS ( 64641 13 2 5ce9e65d92dca71755a778ab80f8d6c57053aea6cd57cb6b28b0a0581ce852dc ) kr. 86400 IN RRSIG ( DS 8 1 86400 20261119050000 20261106040000 8763 . dA/DoS2cOZXLHcNqUvJfp9hKWqSenvmpax1S3IPNiWcIVK5rLM1aNQasH+kWh0M+yd4uBl/4+FbO Rh1mD0EivAQ8ib0xMtW3R44wGXkkHIhi4qXBDH/D3TxOVb96EKzFxNQyPUrcoVhvoIR9MciD3goo n1UujRyxbb9b6Zaht1ZpPjDQBKsUGLd0Pn4RWy1kFIuUXnGfx3ZZiZSleB+XGa4J61T5H8zmqVeT 4makDGMgnXvshhraMJ6ubTmiYDaIb44uRKzM8E3MrdBoj9/vwtAPDNeKved5yTABzQ5At08fgEfC IBueQTzgGvqyAsnkurT2PzzxJBzkN0scZ5gr8w== ) ;; ADDITIONAL SECTION (11 records) c.dns.kr. 172800 IN A 210.101.61.1 e.dns.kr. 172800 IN A 202.30.124.100 e.dns.kr. 172800 IN AAAA 2001:dcc:5::100 d.dns.kr. 172800 IN A 203.83.159.1 d.dns.kr. 172800 IN AAAA 2001:dcc:4::1 g.dns.kr. 172800 IN A 202.31.190.1 g.dns.kr. 172800 IN AAAA 2001:dc5:a::1 f.dns.kr. 172800 IN A 210.101.62.1 f.dns.kr. 172800 IN AAAA 2001:dcc:6::1 b.dns.kr. 172800 IN A 210.101.60.1 ;; { "EDNS-VERSION": 0 }
	Found child zone kr

	Checking DS between . and kr
	Query to d.root-servers.net for kr/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 2240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DS ;; ANSWER SECTION (2 records) kr. 86400 IN DS ( 64641 13 2 5ce9e65d92dca71755a778ab80f8d6c57053aea6cd57cb6b28b0a0581ce852dc ) kr. 86400 IN RRSIG ( DS 8 1 86400 20261119050000 20261106040000 8763 . dA/DoS2cOZXLHcNqUvJfp9hKWqSenvmpax1S3IPNiWcIVK5rLM1aNQasH+kWh0M+yd4uBl/4+FbO Rh1mD0EivAQ8ib0xMtW3R44wGXkkHIhi4qXBDH/D3TxOVb96EKzFxNQyPUrcoVhvoIR9MciD3goo n1UujRyxbb9b6Zaht1ZpPjDQBKsUGLd0Pn4RWy1kFIuUXnGfx3ZZiZSleB+XGa4J61T5H8zmqVeT 4makDGMgnXvshhraMJ6ubTmiYDaIb44uRKzM8E3MrdBoj9/vwtAPDNeKved5yTABzQ5At08fgEfC IBueQTzgGvqyAsnkurT2PzzxJBzkN0scZ5gr8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for kr in the . zone
	DS=64641/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`kr. 86400 IN RRSIG ( DS 8 1 86400 20261119050000 20261106040000 8763 . dA/DoS2cOZXLHcNqUvJfp9hKWqSenvmpax1S3IPNiWcIVK5rLM1aNQasH+kWh0M+yd4uBl/4+FbO Rh1mD0EivAQ8ib0xMtW3R44wGXkkHIhi4qXBDH/D3TxOVb96EKzFxNQyPUrcoVhvoIR9MciD3goo n1UujRyxbb9b6Zaht1ZpPjDQBKsUGLd0Pn4RWy1kFIuUXnGfx3ZZiZSleB+XGa4J61T5H8zmqVeT 4makDGMgnXvshhraMJ6ubTmiYDaIb44uRKzM8E3MrdBoj9/vwtAPDNeKved5yTABzQ5At08fgEfC IBueQTzgGvqyAsnkurT2PzzxJBzkN0scZ5gr8w== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=64641/SHA-256 is now in the chain-of-trust
	`kr. 86400 IN DS ( 64641 13 2 5ce9e65d92dca71755a778ab80f8d6c57053aea6cd57cb6b28b0a0581ce852dc )`
	Query to d.dns.kr for kr/DNSKEY
	Received 369 bytes from 203.83.159.1
	;; Response received from [203.83.159.1] 369 octets ;; HEADER SECTION ;; id = 12718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DNSKEY ;; ANSWER SECTION (4 records) kr. 86400 IN DNSKEY ( 257 3 13 69WS248cnO427m4e98owyLvItMWCJIIIZ24GAoTFXhP1F0U1JfkqB70EnLLrS3litqYP1xlkOrlD dKN1Exxdvg== ) ; keytag 64641 kr. 86400 IN DNSKEY ( 256 3 13 hjA8s7sjm3EMX0wT0tZQ1l+Q4miZChb/xQi5ncwMMscYJw3aTzwg9ZkTFeH621XcjMbNIKKWjxCM dPXimmATUw== ) ; keytag 23196 kr. 86400 IN DNSKEY ( 256 3 13 HGYUz0ef7OFQVmOEivYkHqHuXtIhBZtPTKC24vkE6m933I1ABKRI072ztft+m3JkolH+2PROJRK8 NoE4zKWsZA== ) ; keytag 39177 kr. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261119202103 20261105192103 64641 kr. QU5D+NTRkyfdXUA4aMwRYx1Pe3mrmYJJZOTRMzFRtUE51flxY6FzjPOg4vCBKxhfRofV/VExz169 gQFNBpjPXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for kr
	`kr. 86400 IN DNSKEY ( 257 3 13 69WS248cnO427m4e98owyLvItMWCJIIIZ24GAoTFXhP1F0U1JfkqB70EnLLrS3litqYP1xlkOrlD dKN1Exxdvg== ) ; keytag 64641`
	`kr. 86400 IN DNSKEY ( 256 3 13 hjA8s7sjm3EMX0wT0tZQ1l+Q4miZChb/xQi5ncwMMscYJw3aTzwg9ZkTFeH621XcjMbNIKKWjxCM dPXimmATUw== ) ; keytag 23196`
	`kr. 86400 IN DNSKEY ( 256 3 13 HGYUz0ef7OFQVmOEivYkHqHuXtIhBZtPTKC24vkE6m933I1ABKRI072ztft+m3JkolH+2PROJRK8 NoE4zKWsZA== ) ; keytag 39177`
	DNSKEY=64641/SEP is now in the chain-of-trust
	DS=64641/SHA-256 verifies DNSKEY=64641/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`kr. 86400 IN RRSIG ( DNSKEY 13 1 86400 20261119202103 20261105192103 64641 kr. QU5D+NTRkyfdXUA4aMwRYx1Pe3mrmYJJZOTRMzFRtUE51flxY6FzjPOg4vCBKxhfRofV/VExz169 gQFNBpjPXw== )`
	RRSIG=64641 and DNSKEY=64641/SEP verifies the DNSKEY RRset
	DNSKEY=23196 is now in the chain-of-trust
	DNSKEY=39177 is now in the chain-of-trust
	Query to f.dns.kr for decoheim.co.kr/A
	Received 459 bytes from 210.101.62.1
	;; Response received from [210.101.62.1] 459 octets ;; HEADER SECTION ;; id = 32757 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) decoheim.co.kr. 86400 IN NS dean.ns.cloudflare.com. decoheim.co.kr. 86400 IN NS dora.ns.cloudflare.com. CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN NSEC3 ( 1 1 0 - cqasp60lsne8pvq1541p4qol0irn7d99 NS SOA RRSIG DNSKEY NSEC3PARAM ) CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. 8joZFQ0xvVsZRIEmNFNNzYxGUnuzywvbqYwL0c8uQSTXO4jwMxvzbMeGUFB5gawM1xbq0EjJfGcm SZH8zCWNYA== ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN NSEC3 ( 1 1 0 - kdrt3mi7ncbp3mhh1i33u89g8qnfv867 NS DS RRSIG ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. lZ/spwj1teuFf7bMUmUrps84gmDBIzGEVSIrMH36yuhjJtoKpJ+NO8klFx3d9XfEc0C/daY7YqUV e++dqUswHA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to g.dns.kr for co.kr/DNSKEY
	Received 375 bytes from 202.31.190.1
	;; Response received from [202.31.190.1] 375 octets ;; HEADER SECTION ;; id = 31756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.kr. IN DNSKEY ;; ANSWER SECTION (4 records) co.kr. 86400 IN DNSKEY ( 256 3 13 jJWMxc+FAnFTjp+Ec4hQp9vkeUAzryuebGpa0u3YAa8odZ80s3D8NsV//e0Wv61rpwD4wQ0Av8YA ANzXYkmRpQ== ) ; keytag 19987 co.kr. 86400 IN DNSKEY ( 256 3 13 MiT/8vM4HUL7B2Bro1bNisbCvl1R2dnT38HBFHO3CfW2MPtkkscteUa1PP2HHhxod+C4fGNUc8zE CQqUIVIT1Q== ) ; keytag 34455 co.kr. 86400 IN DNSKEY ( 257 3 13 IxY24mab6kB4Dppw6W0SH200LASPHGmH22UsGAr4Ua1wUh2MmPXRR6DSXbrvLzP8LQ3Jxu0h2Sxr hgoXri50+A== ) ; keytag 8875 co.kr. 86400 IN RRSIG ( DNSKEY 13 2 86400 20261119202106 20261105192106 8875 co.kr. +sS4YNUdNzI4pCiwehBGFKkR5PQ/G0G2HR4MRu9qr9fD+t52Iqm1JEkfHacfwFbgUafUOzSI3XkM sfBAVU2hig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.kr
	Attempting to learn nameservers for co.kr
	Query to g.dns.kr for co.kr/NS
	Received 235 bytes from 202.31.190.1
	;; Response received from [202.31.190.1] 235 octets ;; HEADER SECTION ;; id = 351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.kr. IN NS ;; ANSWER SECTION (7 records) co.kr. 86400 IN NS g.dns.kr. co.kr. 86400 IN NS e.dns.kr. co.kr. 86400 IN NS b.dns.kr. co.kr. 86400 IN NS d.dns.kr. co.kr. 86400 IN NS c.dns.kr. co.kr. 86400 IN NS f.dns.kr. co.kr. 86400 IN RRSIG ( NS 13 2 86400 20261119192013 20261105192013 19987 co.kr. wmBoYdlB9luAE0x36O8KZyZSRkV+HlFDjySlDA1qjRBRNY6cj0nS8mUyfx957Vx1oCixYAwXWZWa Wj8OFBFPKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.kr nameservers: g.dns.kr, e.dns.kr, b.dns.kr, d.dns.kr, c.dns.kr, f.dns.kr

co.kr

	Checking DS between kr and co.kr
	Query to b.dns.kr for co.kr/DS
	Received 180 bytes from 210.101.60.1
	;; Response received from [210.101.60.1] 180 octets ;; HEADER SECTION ;; id = 23201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.kr. IN DS ;; ANSWER SECTION (2 records) co.kr. 86400 IN DS ( 8875 13 2 3914b5103fbc41c486c3c98a67814e54c5cdb001450e1e8ea19536eec58a55a2 ) co.kr. 86400 IN RRSIG ( DS 13 2 86400 20261119192027 20261105192027 39177 kr. UrtHp/54AWqDP3g1Q5avpheWzJErUjMZCTcl1cVDushD31yX3iTaw2ahagz21X3WNDs81FfeZoRZ 6t2339soKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.kr in the kr zone
	DS=8875/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`co.kr. 86400 IN RRSIG ( DS 13 2 86400 20261119192027 20261105192027 39177 kr. UrtHp/54AWqDP3g1Q5avpheWzJErUjMZCTcl1cVDushD31yX3iTaw2ahagz21X3WNDs81FfeZoRZ 6t2339soKA== )`
	RRSIG=39177 and DNSKEY=39177 verifies the DS RRset
	DS=8875/SHA-256 is now in the chain-of-trust
	`co.kr. 86400 IN DS ( 8875 13 2 3914b5103fbc41c486c3c98a67814e54c5cdb001450e1e8ea19536eec58a55a2 )`
	Query to f.dns.kr for co.kr/DNSKEY
	Received 375 bytes from 210.101.62.1
	;; Response received from [210.101.62.1] 375 octets ;; HEADER SECTION ;; id = 42479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.kr. IN DNSKEY ;; ANSWER SECTION (4 records) co.kr. 86400 IN DNSKEY ( 257 3 13 IxY24mab6kB4Dppw6W0SH200LASPHGmH22UsGAr4Ua1wUh2MmPXRR6DSXbrvLzP8LQ3Jxu0h2Sxr hgoXri50+A== ) ; keytag 8875 co.kr. 86400 IN DNSKEY ( 256 3 13 MiT/8vM4HUL7B2Bro1bNisbCvl1R2dnT38HBFHO3CfW2MPtkkscteUa1PP2HHhxod+C4fGNUc8zE CQqUIVIT1Q== ) ; keytag 34455 co.kr. 86400 IN DNSKEY ( 256 3 13 jJWMxc+FAnFTjp+Ec4hQp9vkeUAzryuebGpa0u3YAa8odZ80s3D8NsV//e0Wv61rpwD4wQ0Av8YA ANzXYkmRpQ== ) ; keytag 19987 co.kr. 86400 IN RRSIG ( DNSKEY 13 2 86400 20261119202106 20261105192106 8875 co.kr. +sS4YNUdNzI4pCiwehBGFKkR5PQ/G0G2HR4MRu9qr9fD+t52Iqm1JEkfHacfwFbgUafUOzSI3XkM sfBAVU2hig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for co.kr
	`co.kr. 86400 IN DNSKEY ( 257 3 13 IxY24mab6kB4Dppw6W0SH200LASPHGmH22UsGAr4Ua1wUh2MmPXRR6DSXbrvLzP8LQ3Jxu0h2Sxr hgoXri50+A== ) ; keytag 8875`
	`co.kr. 86400 IN DNSKEY ( 256 3 13 MiT/8vM4HUL7B2Bro1bNisbCvl1R2dnT38HBFHO3CfW2MPtkkscteUa1PP2HHhxod+C4fGNUc8zE CQqUIVIT1Q== ) ; keytag 34455`
	`co.kr. 86400 IN DNSKEY ( 256 3 13 jJWMxc+FAnFTjp+Ec4hQp9vkeUAzryuebGpa0u3YAa8odZ80s3D8NsV//e0Wv61rpwD4wQ0Av8YA ANzXYkmRpQ== ) ; keytag 19987`
	DNSKEY=8875/SEP is now in the chain-of-trust
	DS=8875/SHA-256 verifies DNSKEY=8875/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.kr. 86400 IN RRSIG ( DNSKEY 13 2 86400 20261119202106 20261105192106 8875 co.kr. +sS4YNUdNzI4pCiwehBGFKkR5PQ/G0G2HR4MRu9qr9fD+t52Iqm1JEkfHacfwFbgUafUOzSI3XkM sfBAVU2hig== )`
	RRSIG=8875 and DNSKEY=8875/SEP verifies the DNSKEY RRset
	DNSKEY=34455 is now in the chain-of-trust
	DNSKEY=19987 is now in the chain-of-trust
	Query to c.dns.kr for decoheim.co.kr/A
	Received 459 bytes from 210.101.61.1
	;; Response received from [210.101.61.1] 459 octets ;; HEADER SECTION ;; id = 57599 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) decoheim.co.kr. 86400 IN NS dora.ns.cloudflare.com. decoheim.co.kr. 86400 IN NS dean.ns.cloudflare.com. CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN NSEC3 ( 1 1 0 - cqasp60lsne8pvq1541p4qol0irn7d99 NS SOA RRSIG DNSKEY NSEC3PARAM ) CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. 8joZFQ0xvVsZRIEmNFNNzYxGUnuzywvbqYwL0c8uQSTXO4jwMxvzbMeGUFB5gawM1xbq0EjJfGcm SZH8zCWNYA== ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN NSEC3 ( 1 1 0 - kdrt3mi7ncbp3mhh1i33u89g8qnfv867 NS DS RRSIG ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. lZ/spwj1teuFf7bMUmUrps84gmDBIzGEVSIrMH36yuhjJtoKpJ+NO8klFx3d9XfEc0C/daY7YqUV e++dqUswHA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.dns.kr for decoheim.co.kr/DNSKEY
	Received 459 bytes from 203.83.159.1
	;; Response received from [203.83.159.1] 459 octets ;; HEADER SECTION ;; id = 55605 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) decoheim.co.kr. 86400 IN NS dean.ns.cloudflare.com. decoheim.co.kr. 86400 IN NS dora.ns.cloudflare.com. CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN NSEC3 ( 1 1 0 - cqasp60lsne8pvq1541p4qol0irn7d99 NS SOA RRSIG DNSKEY NSEC3PARAM ) CQ4HRU7HH3H35R4BMKMRTCR9QI6T6R79.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. 8joZFQ0xvVsZRIEmNFNNzYxGUnuzywvbqYwL0c8uQSTXO4jwMxvzbMeGUFB5gawM1xbq0EjJfGcm SZH8zCWNYA== ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN NSEC3 ( 1 1 0 - kdrt3mi7ncbp3mhh1i33u89g8qnfv867 NS DS RRSIG ) KDBTOPDFNSGSF7B9T8OAOQAJE1CC563A.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. lZ/spwj1teuFf7bMUmUrps84gmDBIzGEVSIrMH36yuhjJtoKpJ+NO8klFx3d9XfEc0C/daY7YqUV e++dqUswHA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone decoheim.co.kr

decoheim.co.kr

	Checking DS between co.kr and decoheim.co.kr
	Query to d.dns.kr for decoheim.co.kr/DS
	Received 569 bytes from 203.83.159.1
	;; Response received from [203.83.159.1] 569 octets ;; HEADER SECTION ;; id = 8712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) co.kr. 900 IN SOA ( g.dns.kr. domain-manager.nic.or.kr. 2611060815 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) cq4hru7hh3h35r4bmkmrtcr9qi6t6r79.co.kr. 900 IN NSEC3 ( 1 1 0 - cqasp60lsne8pvq1541p4qol0irn7d99 NS SOA RRSIG DNSKEY NSEC3PARAM ) kdbtopdfnsgsf7b9t8oaoqaje1cc563a.co.kr. 900 IN NSEC3 ( 1 1 0 - kdrt3mi7ncbp3mhh1i33u89g8qnfv867 NS DS RRSIG ) co.kr. 900 IN RRSIG ( SOA 13 2 86400 20261120072415 20261106062415 19987 co.kr. Zn1d4cIAQ4xkacFv+wzawYIBAHWthhbaqdLXf/Q0x9QKZOYldWOEGTHYo7/ycS/hkchaoZHonh3I BLW4hoU4Hg== ) cq4hru7hh3h35r4bmkmrtcr9qi6t6r79.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. 8joZFQ0xvVsZRIEmNFNNzYxGUnuzywvbqYwL0c8uQSTXO4jwMxvzbMeGUFB5gawM1xbq0EjJfGcm SZH8zCWNYA== ) kdbtopdfnsgsf7b9t8oaoqaje1cc563a.co.kr. 900 IN RRSIG ( NSEC3 13 3 900 20261119192013 20261105192013 19987 co.kr. lZ/spwj1teuFf7bMUmUrps84gmDBIzGEVSIrMH36yuhjJtoKpJ+NO8klFx3d9XfEc0C/daY7YqUV e++dqUswHA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for decoheim.co.kr in the co.kr zone
	Query to dora.ns.cloudflare.com for decoheim.co.kr/DNSKEY
	Received 105 bytes from 173.245.58.108
	;; Response received from [173.245.58.108] 105 octets ;; HEADER SECTION ;; id = 21001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) decoheim.co.kr. 1800 IN SOA ( dean.ns.cloudflare.com. dns.cloudflare.com. 2418864968 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to dean.ns.cloudflare.com for decoheim.co.kr/A
	Received 75 bytes from 172.64.33.153
	;; Response received from [172.64.33.153] 75 octets ;; HEADER SECTION ;; id = 31309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN A ;; ANSWER SECTION (2 records) decoheim.co.kr. 300 IN A 172.67.218.187 decoheim.co.kr. 300 IN A 104.21.45.202 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dean.ns.cloudflare.com is authoritative for decoheim.co.kr
	Query to dora.ns.cloudflare.com for decoheim.co.kr/SOA
	Received 105 bytes from 173.245.58.108
	;; Response received from [173.245.58.108] 105 octets ;; HEADER SECTION ;; id = 5035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN SOA ;; ANSWER SECTION (1 record) decoheim.co.kr. 1800 IN SOA ( dean.ns.cloudflare.com. dns.cloudflare.com. 2418864968 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dean.ns.cloudflare.com for decoheim.co.kr/A
	decoheim.co.kr A RR has value 172.67.218.187
	decoheim.co.kr A RR has value 104.21.45.202
	No RRSIGs found

decoheim.co.kr

	Query to dora.ns.cloudflare.com for decoheim.co.kr/A
	Received 75 bytes from 173.245.58.108
	;; Response received from [173.245.58.108] 75 octets ;; HEADER SECTION ;; id = 2258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; decoheim.co.kr. IN A ;; ANSWER SECTION (2 records) decoheim.co.kr. 300 IN A 104.21.45.202 decoheim.co.kr. 300 IN A 172.67.218.187 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dora.ns.cloudflare.com is authoritative for decoheim.co.kr
	Query to dora.ns.cloudflare.com for decoheim.co.kr/A
	decoheim.co.kr A RR has value 104.21.45.202
	decoheim.co.kr A RR has value 172.67.218.187
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test decoheim.co.kr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: