practice
$ openssl genrsa -out key.pem 1024
$ openssl rsa -in pub.pem -pubout -out key.pem
# dkim
# v=DKIM1;k=rsa;p=public_key_value_in_pub.pem
v=DMARC1;p=none;sp=none;pct=100;rua=mailto:iam@domain.com;ruf=mailto:iam@domain.com;ri=86400;aspf=r;adkim=r;fo=1
v=DMARC1;p=none;rua=mailto:iam@domain.com