View on GitHub

DNSViz: A DNS visualization tool

www.moea.gov.tw

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
  10. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (4)
  • hinet.net/SOA
  • www-moea.cdn.hinet.net/A
  • www-moea.cdn.hinet.net/A
  • www-moea.cdn.hinet.net/A
Secure (2)
  • net/SOA
  • www.moea.gov.tw/CNAME

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (18)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 9799)
  • NSEC3 proving non-existence of hinet.net/DS
  • gov.tw/DNSKEY (alg 8, id 19435)
  • gov.tw/DNSKEY (alg 8, id 20844)
  • gov.tw/DNSKEY (alg 8, id 30420)
  • gov.tw/DS (alg 8, id 19435)
  • gov.tw/DS (alg 8, id 514)
  • moea.gov.tw/DNSKEY (alg 8, id 10474)
  • moea.gov.tw/DNSKEY (alg 8, id 15336)
  • moea.gov.tw/DNSKEY (alg 8, id 49968)
  • moea.gov.tw/DS (alg 8, id 10474)
  • net/DNSKEY (alg 8, id 35886)
  • net/DNSKEY (alg 8, id 4604)
  • net/DS (alg 8, id 35886)
  • tw/DNSKEY (alg 8, id 40792)
  • tw/DNSKEY (alg 8, id 57249)
  • tw/DS (alg 8, id 40792)
Non_existent (1)
  • gov.tw/DNSKEY (alg 8, id 514)

Delegation statusDelegation status

Insecure (2)
  • hinet.net to cdn.hinet.net
  • net to hinet.net
Secure (4)
  • . to net
  • . to tw
  • gov.tw to moea.gov.tw
  • tw to gov.tw

NoticesNotices

Warnings (1)
  • moea.gov.tw/DNSKEY: The server responded with no OPT record, rather than with RCODE FORMERR. See RFC 6891, Sec. 7. (163.29.193.99, 210.69.121.99, 2001:4420:6003:1200::99, 2001:4420:702c:1200::99, UDP_-_EDNS0_512_D_KN)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph