openssl genpkey -algorithm RSA -out pri.pem -pkeyopt rsa_keygen_bits:2048
openssl rsa -in pri.pem -pubout -out pub.pem