1
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/forge.min.js"></script>
2

3
<h1>自然人憑證 node-forge 解析 PKCS7</h1>
4
PKCS7<br>
5
<textarea id="pkcs7" rows="8" cols="65"></textarea><br>
6
<button onclick="submit()">解析</button>
7
</form>
8
<hr />
9
<pre id="result"></pre>

1
function submit() {
2
  let result = "";
3

4
  // 從 certb64 提取公鑰
5
  const begin = "-----BEGIN PKCS7-----";
6
  const end = "-----END PKCS7-----";
7
  const certPem = begin + document.getElementById("pkcs7").value + end;
8

9
  const pkcs7 = forge.pkcs7.messageFromPem(certPem);
10
  const data = toUtf8(pkcs7);
11

12
  result += "簽章資訊\n===\n";
13
  result += `tbs: ${data.rawCapture.content.value[0].value}\n`;
14
  result += `hashAlgorithm: ${data.rawCapture.digestAlgorithm}\n`;
15
  const attrs = data.rawCapture.authenticatedAttributes;
16
  const nonce = data.rawCapture.authenticatedAttributes.find(
17
    (i) => i.value[0].value == "1.2.840.113549.1.9.25.3"
18
  );
19
  result += `nonce: ${nonce ? nonce.value[1].value[0].value : "null"}\n`;
20
  const cardNumber = data.rawCapture.authenticatedAttributes.find(
21
    (i) => i.value[0].value == "2.16.886.1.100.2.204"
22
  );
23
  result += `cardNumber: ${
24
    cardNumber ? cardNumber.value[1].value[0].value : "null"
25
  }\n`;
26
  const signingTime = data.rawCapture.authenticatedAttributes.find(
27
    (i) => i.value[0].value == "1.2.840.113549.1.9.5"
28
  );
29
  result += `signingTime: ${
30
    signingTime ? signingTime.value[1].value[0].value : "null"
31
  }\n`;
32

33
  result += "\n\n憑證資訊\n===\n";
34
  const issuer = data.certificates[0].issuer.attributes;
35
  result += `issuerDN: C=${issuer[0].value}, O=${issuer[1].value}, OU=${issuer[2].value}\n`;
36
  const subject = data.certificates[0].subject.attributes;
37
  result += `subjectDN: C=${subject[0].value}, O=${subject[1].value}, serialNumber=${subject[2].value}\n`;
38
  result += `serialNumber: ${data.certificates[0].serialNumber}\n`;
39
  result += `notAfter: ${data.certificates[0].validity.notAfter}\n`;
40
  result += `notBefore: ${data.certificates[0].validity.notBefore}\n`;
41

42
  result += JSON.stringify(data, null, 2);
43
  document.getElementById("result").innerHTML = result;
44
}
45

46
// 將object中所有value轉為utf8
47
function toUtf8(obj) {
48
  if (typeof obj === "object" && obj !== null) {
49
    for (const key in obj) {
50
      if (Object.prototype.hasOwnProperty.call(obj, key)) {
51
        obj[key] = toUtf8(obj[key]);
52
      }
53
    }
54
    return obj;
55
  } else if (typeof obj === "string") {
56
    if (/[\u0000-\u001F]/.test(obj)) {
57
      // 解決OID亂碼問題
58
      return toOid(obj);
59
    } else {
60
      // 解決中文亂碼問題
61
      const textDecoder = new TextDecoder("utf-8");
62
      const byteArray = new Uint8Array([...obj].map((c) => c.charCodeAt(0)));
63
      return textDecoder.decode(byteArray);
64
    }
65
  } else {
66
    return obj;
67
  }
68
}
69

70
// 將HEX轉為OID
71
function toOid(str) {
72
  const bytes = Array.from(str, c => c.charCodeAt(0));
73
  const oid = [Math.floor(bytes[0] / 40), bytes[0] % 40];
74
  let t = 0;
75
  for (let i = 1; i < bytes.length; i++) {
76
    if (bytes[i] >= 128) {
77
      t = (t << 7) + (bytes[i] - 128);
78
    } else {
79
      oid.push((t << 7) + bytes[i]);
80
      t = 0;
81
    }
82
  }
83
  return oid.join(".");
84
}