About capturing AES-128 encrypted stream

[wanch]

Part of the network flow

"000124", "五月 25, 11:05:25", "http://iac2.wowza-rr-vod.edgeware.tvb.com/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?sig=99642f69b582b531d0de64e6c8a25b7c&ext_start_limit=1464152725&int_start_limit=1464152725&ts=1464152725", "GET m3u8 file (relative)", "", "37232000", "202.126.53.21"
"000127", "五月 25, 11:05:25", "http://202.126.56.113:80/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a6b_1464152725_1464152725", "http m3u8 file", "", "37232264", "202.126.53.21"
"000128", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a6b_1464152725_1464152725", "GET m3u8 file (relative)", "", "37232352", "202.126.56.113"
"000129", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232440", "202.126.56.113"
"000132", "五月 25, 11:05:25", "mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0", "mysp", "", "37232704", "202.126.56.113"
"000133", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232792", "202.126.56.113"
"000134", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232880", "202.126.56.113"
"000136", "五月 25, 11:05:25", "http://crl3.digicert.com/ssca-sha2-g5.crl0", "http crl0 file", "", "37233056", "202.126.60.231"
"000137", "五月 25, 11:05:25", "http://crl4.digicert.com/ssca-sha2-g5.crl0L", "http crl0L file", "", "37233144", "202.126.60.231"
"000138", "五月 25, 11:05:25", "https://www.digicert.com/CPS0", "https", "", "37233232", "202.126.60.231"
"000139", "五月 25, 11:05:25", "http://ocsp.digicert.com0F", "http", "", "37233320", "202.126.60.231"
"000140", "五月 25, 11:05:25", "http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt0", "http crt0 file", "", "37233408", "202.126.60.231"
"000141", "五月 25, 11:05:25", "www.digicert.com1", "domain/unknown", "", "37233496", "202.126.60.231"
"000142", "五月 25, 11:05:25", "http://ocsp.digicert.com0{", "http", "", "37233584", "202.126.60.231"
"000143", "五月 25, 11:05:25", "http://crl3.digicert.com/DigiCertGlobalRootCA.crl07", "http crl07 file", "", "37233672", "202.126.60.231"
"000144", "五月 25, 11:05:25", "http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=", "http crl0= file", "", "37233760", "202.126.60.231"
"000150", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_0.ts", "GET ts file (relative)", "", "37234288", "202.126.56.113"
"000163", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_0.aac", "GET AudioMedia file (relative)", "", "37235520", "202.126.56.113"
"000164", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s_0.webvtt", "GET webvtt file (relative)", "", "37235432", "202.126.56.113"
"000165", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_34.ts", "GET ts file (relative)", "", "37235784", "202.126.56.113"
"000166", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_34.aac", "GET AudioMedia file (relative)", "", "37235608", "202.126.56.113"
"000167", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s_25.webvtt", "GET webvtt file (relative)", "", "37235872", "202.126.56.113"

This is the video file

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8

This is the audio file

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8

This is the subtitle file not encrypted

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8

Probably the key part?

#EXT-X-KEY:METHOD=AES-128,URI="mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0"