Identifier Alignment with `dkimverify`

[link2xt]

Looking at dkimverify usage, I don't understand how it decides if the domain which provided a valide DKIM signature is supposed to sign this email.

Not checking that domain corresponds to the From field is like verifying a TLS certificate without checking that it is a certificate for a domain that is in the URL.

So how do I specify the domain? Would be nice if dkimverify accepts the domain as an argument or extracts it from the message From field.

See DMARC standard for more: https://www.rfc-editor.org/rfc/rfc7489#section-3.1.1