Need SBG6580 Firmware backup

[maximus64]

Ok. I have successfully recover the modem back then. But now I wanted to extract the Certs to used on my other SB6120 modem ( I have to do all this BS because TWC isn't allow that specific modem to be online and I don't want to buy another modem ). I Extract it with cmnonexp 1.1.1 but there is some error complaining about the cert format. I try to load it in to the SB6120 anyway but doesn't work. It just can't parse the CM private key file, but everything else seem ok and was able to get my config from CMTS.

The warning are:
WARNING: address: 033F; size: 0x02A0 (672); unknow cert type: 0xE14B
Writing to file non01_2_private.key 672 bytes

Clearly cmnonexp didn't parse the CFG correctly :/

cmnonexp ouput:

Code:

cmnonexp (CableModem non-volatile explorer for BCM3348/BCM3349)
Version: 1.1.1 (Nov 16 2014 23:20:39)
         (c)2008-2009 under GPLv3 by qingpu & raikol

Read 65536 bytes from file mycfg.bin

0x00CA:(202) ---> Start new non-volatile nonvol <---
0x00CC:Length:0x541F (21535)
0x00CE:CRC32-Motorola:0xFFFFFFFFADB8E409 (-1380391927)
Non-volatile nonvol length: 0x541F (21535) at offset: 0x00CA
Calculate CRC: 0xADB8E409
CRC OK!!!

CM Application NonVol Settings found!
0x00D2:CMAp Size:0x0009 (9)
0x00D4:CMAp Magic:0x434D4170 ('CMAp')

Message Logging NonVol Settings found!
0x00DB:MLog Size:0x003C (60)
0x00DD:MLog Magic:0x4D4C6F67 ('MLog')

ERROR: address: 0119; size: 0x00C9 (201); unknow magic: 0xFFFFFFFFF2A1F61F ('    ')

8021 NonVol Settings found!
0x01E0:8021 Size:0x0010 (16)
0x01E2:8021 Magic:0x38303231 ('8021')

ERROR: address: 01F2; size: 0x008C (140); unknow magic: 0x38303253 ('802S')

Factory NonVol Settings found!
0x027C:FACT Size:0x0023 (35)
0x027E:FACT Magic:0x46414354 ('FACT')

PRNT NonVol Settings found!
0x029F:PRNT Size:0x0008 (8)
0x02A1:PRNT Magic:0x50524E54 ('PRNT')

CM BPI NonVol Settings found!
0x02A7:bpi Size:0x16C7 (5831)
0x02A9:bpi Magic:0x62706920 ('bpi ')

Cert number 1 found!
0x02AF:Cert Size:0x008C (140)
0x02B1:Cert class 1:0x3081 (12417)
Writing to file non01_1_public.key 140 bytes

WARNING: address: 033F; size: 0x02A0 (672); unknow cert type: 0xE14B
Writing to file non01_2_private.key 672 bytes

Cert number 3 found!
0x05DF:Cert Size:0x010E (270)
0x05E1:Cert class 2:0x3082 (12418)
Writing to file non01_3_root.key 270 bytes

Cert number 4 found!
0x06EF:Cert Size:0x0327 (807)
0x06F1:Cert class 2:0x3082 (12418)
Writing to file non01_4_cm_cert.cer 807 bytes

Cert number 5 found!
0x0A18:Cert Size:0x0404 (1028)
0x0A1A:Cert class 2:0x3082 (12418)
Writing to file non01_5_ca_cert.cer 1028 bytes

Cert number 6 found!
0x0E1E:Cert Size:0x008C (140)
0x0E20:Cert class 1:0x3081 (12417)
Writing to file non01_unknow06.key 140 bytes

WARNING: address: 0EAE; size: 0x02A0 (672); unknow cert type: 0x6299
Writing to file non01_unknow07.key 672 bytes

Cert number 8 found!
0x114E:Cert Size:0x010E (270)
0x1150:Cert class 2:0x3082 (12418)
Writing to file non01_unknow08.key 270 bytes

Cert number 9 found!
0x125E:Cert Size:0x032C (812)
0x1260:Cert class 2:0x3082 (12418)
Writing to file non01_unknow09.key 812 bytes

Cert number 10 found!
0x158C:Cert Size:0x03E0 (992)
0x158E:Cert class 2:0x3082 (12418)
Writing to file non01_unknow10.key 992 bytes

ERROR: address: 1970; size: 0x0082 (130); unknow magic: 0xFFFFFFFFD0C20100 ('    ')

ERROR: address: 19F2; size: 0x002C (44); unknow magic: 0xFFFFFFFFD0C20300 ('    ')

CableModem EventLog NonVol Settings found!
0x1A1C:CMEV Size:0x0008 (8)
0x1A1E:CMEV Magic:0x434D4556 ('CMEV')

Also, Does anyone know where is the UART port on this modem (SBG6580)? or maybe someway to enable telnet/ssh?

Thank you