Use X509_check_ca to determine if this is a CA key.
drwxr-xr-x - pkgtools