Root and TLD TSIG Compliance Report : 2019-01-23T00:00:00Z
     36 dns=ok                 dnswkk=formerr,notsig
     54 dns=ok                 dnswkk=malformed (non RFC compliant: malformed)
   4164 dns=ok                 dnswkk=notauth,badkey
     14 dns=servfail           dnswkk=notauth,badkey
      8 dns=refused            dnswkk=notauth,badkey
      3 dns=timeout            dnswkk=notauth,badkey
      1 dns=noaa               dnswkk=notauth,badkey
      1 dns=nosoa              dnswkk=notauth,badkey
     12 dns=ok                 dnswkk=notauth,badkey,proxy
     72 dns=ok                 dnswkk=notauth,badkey,tsig-bad-time
      2 dns=servfail           dnswkk=notauth,badkey,tsig-bad-time
     14 dns=ok                 dnswkk=notauth,badkey,tsig-bad-time,tsig-bad-fudge
      1 dns=servfail           dnswkk=notauth,badkey,tsig-wrong-alg
      8 dns=ok                 dnswkk=notauth,notsig (non RFC compliant: NOTAUTH without TSIG)
   2492 dns=ok                 dnswkk=notsig
      5 dns=ok                 dnswkk=refused,badkey (non RFC compliant: rcode != NOTAUTH)
      5 dns=ok                 dnswkk=servfail,notsig (non RFC compliant: SERVFAIL when plain DNS not SERVFAIL)
      2 dns=servfail           dnswkk=servfail,notsig
     52 dns=timeout            dnswkk=timeout
     12 dns=ok                 dnswkk=timeout (non RFC compliant: timeout on request containing TSIG)