scion-pki is the canonical way/tool to generate all crypto objects used in the control plane PKI. The topology generator should use that instead of implementing its own logic.