DNSSEC EARLY WARNING SYSTEM (DEWS) was DNSSEC SIGNATURE EXPIRY ANALYSIS (DSEA)

DNSSEC EARLY WARNING SYSTEM (DEWS) - Fri Jun 27 11:28:44 GMT 2025

(l.dns.cn.)


RR        Tag   Domain Name: xn--fiqz9s.  One tick = 1.0 days
DNSKEY    03991--------------+++++++++++|++++++++++++++++++---------------------
DNSKEY    28290--------------+++++++++++|++++++++++++++++++---------------------
DNSKEY    65448--------------+++++++++++|++++++++++++++++++---------------------
NS        65448----+++++++++++++++++++++|++++++++-------------------------------
SOA       65448-------------------------|+++++++++++++++++++++++++++++----------
RR        Tag   Domain Name: xn--fiqz9s.  One tick = 7.0 days
DNSKEY    03991------------------------+|++-------------------------------------
DNSKEY    28290------------------------+|++-------------------------------------
DNSKEY    65448------------------------+|++-------------------------------------
NS        65448----------------------+++|+--------------------------------------
SOA       65448-------------------------|++++-----------------------------------
Some signatures will expire in 8 days out of 30 day validity period.
KSK 3991 RRSIG validated alg:8
KSK 28290 RRSIG validated alg:8
ZSK 65448 RRSIG validated alg:8

Related Links:

DNSSEC Resources

Copyright (c) 2010-2019 DC Communications, Inc. (DCI)
THE SERVICE IS PROVIDED "AS IS" AND DCI DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SERVICE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DCI BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SERVICE. "DNSSEC/DNS/TLD Early Warning System (DEWS, DNEWS, TEWS)"