#!/bin/bash

if [[ "$1" == "--help" ]]; then
  echo drill_TLSA [a] debian.org

else
  dns=a.root-servers.net 
  let quiet=0
  while [[ $# -gt 1 ]]; do
    if [[ "$1" = "-q" ]]; then let quiet=1
    else dns=$1.root-servers.net
    fi
    shift;
  done

  drill $dns +trusted-key=/usr/share/dns/root.key +topdown +sigchase TLSA _443._tcp.$1 | egrep -v "^(;.*)?$"
fi