Twilio now allows TLS & SRTP connections with their Elastic SIP Trunking. However, there are some issues with the way they've done it that prevent Asterisk from being able to verify their server's certificate.
First of all, their documentation tells you to download the Thawte Primary Root CA, when the certificate I saw was signed with the