🆔 New format for ARC/APRC number is not accepted--testing and reporting thread

FenjaJie · April 6, 2021, 3:25pm

At this point I should know better than asking why they made it like this, but

KongTaigi · April 9, 2021, 12:21pm

Update.

I use an i-cash card for all purchases at 7-11 (due to a hectic teaching/research schedule, I tend to shop there daily). Today the clerk asked if I wanted to check it I had won the lottery for the last two months. Process as follows (simpler than the process in the link provided by @slawa, which is also appreciated). Using i-cash provides discounts and points used to get free products. Also, no need for paper receipts.

Place the card on the scanner (NFC-based, I presume) on the iBon terminal.
Clerk quickly selects the options (I basically just observed).
Found it I won 200 NTD.
Opted to add the 200 clams to my i-cash card balance.
A paper receipt was printed. I signed and jotted down my phone number.
6. Time to enter my NEW ARC number!
7. Scanned the bar code on the back of my ARC.
8. SUCCESS: Balance on the card immediately increased by 200 bones.

Granted, I hadn’t checked my receipts on the past ten years, so but sure how the old ARC number worked. However, I can confirm that the new ARC number is compatible with the lottery system, say least with the i-cash card method

Marco · April 9, 2021, 12:23pm

Wait. You’re supposed to MANUALLY check if you win?

slawa · April 9, 2021, 12:29pm

Same with EasyCard, need to check at the terminal if you store receipts digitally, unless you link it with the digital receipts account from the tax office.

KongTaigi · April 9, 2021, 12:40pm

As far as I know the terminal will check all your receipts saved on the i-cash (or similar cards). Very hassle-free, if you ask them to “save the receipts” in the card. There may be an automatic notification function of which I’m not aware, but the use of the terminal for checking is quite fast.

Main point: new numbers for the ARC do work for collecting receipt lottery winnings. I think the old ones did too, since I remember winning once back in my “instant noodles every meal PhD dissertation writing days”

Andrew · April 9, 2021, 12:41pm

It’s the digital age with Taiwanese characteristics.

Bluew · April 20, 2021, 6:45am

Taobao still will not not allow new ARC number to be used. I am registered on EZway, but when putting in ARC it shows not valid and won’t let me pay for customs.

slawa · April 20, 2021, 1:12pm

An issue I ran into with Cathay Bank.

When linking the bank account to EasyWallet the app send you to a Cathay website to link. That website only accepts the old format.

https://www.cathaybk.com.tw/ALS/deposit/JKOS/jkos_s1.aspx

https://www.cathaybk.com.tw/ALS/Common/js/validator.js

        foreignId:function(val){
            var MULT = [1, 9, 8, 7, 6, 5, 4, 3, 2, 1, 1];
            var character = ["A", "B", "C", "D", "E", "F", "G", "H", "J", "K", "L", "M", "N", "P", "Q", "R", "S", "T", "U", "V", "X", "Y", "W", "Z", "I", "O"];
            var map = ["10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35"];
            var NEWID = '';
            var SUM = 0;
            var index1 = character.indexOf(val.substr(0, 1).toUpperCase());
            var char2 = val.substr(1, 1);
            var index2 = character.indexOf(char2.toUpperCase());
            if (index1 <= -1 || index2 <= -1 || "ABCD".indexOf(char2) <= -1) { return false; }
            if (val.length != 10) { return false; }
            NEWID = map[index1] + (map[index2] % 10) + val.substr(2, 8);
            for (var i = 0; i < NEWID.length; i++) {
                SUM += parseInt(NEWID.substr(i, 1), 10) * MULT[i];
            }
            if (SUM % 10 != 0) {
                return false;
            }

            return true;
        },

Tomorrow I will try to use remote debugging and overwrite the validation function before sending the form. I am curious if they also do server-side validation. @fifieldt

FenjaJie · April 20, 2021, 2:49pm

I’ll go with “No, they don’t” xD

DesiInTaipei · April 21, 2021, 10:32am

If they don’t, they deserve whatever is thrown at them

FenjaJie · April 22, 2021, 12:26pm

And? @slawa did they do Server-Side validation?

(Server to client: “You are perfect as you are and you shouldn’t listen to anyone who says otherwise!”)

slawa · April 23, 2021, 3:47am

They do it properly. The EasyWallet app posts to the login page all relevant data in XML format signed with a certificate.

MSG (personal data removed)

<IPAY>
    <AccountLink Id="signData">
        <ORG>103</ORG>
        <ID>Mxxxxxxx</ID>
        <BIRTH>xxxxxxx</BIRTH>
        <ACCOUNT>xxxxxxxxx</ACCOUNT>
        <JACTNO>xxxxxx</JACTNO>
        <SRRN>xxxxxx</SRRN>
    </AccountLink>
    <ds:Signature
        xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:SignedInfo>
            <ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></ds:CanonicalizationMethod>
            <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod>
            <ds:Reference URI="#signData">
                <ds:Transforms>
                    <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></ds:Transform>
                </ds:Transforms>
                <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
                <ds:DigestValue>gPWqYbymxODRYCYABbB1TJX/zjs=</ds:DigestValue>
            </ds:Reference>
        </ds:SignedInfo>
        <ds:SignatureValue>XXXXXXXXXXXXXyrOfsmGtpsBj2x21Ec994VpxVy8cB3tBhiWtP+7Ihow7OVp4GuJj8ontMFjUg2jBUekCZsx7OPuVnJ5axC69AzzhG9ORKlJ2B4WUkZqesEsOws4G5+nut2bEGdMT2+6laoFoSGnadwXx1RRs4JK+xuIe2SL3RhJhLyI8guAxM/KKDvn4s8N2PEmMEaskAR9tSgUQjGQuQ5TgUESVZPM0TO1BW7Ci5uwm/iylYzSK2QFL9F/bz1N7a0zxSMImvs6Rq/89Brs0FzXUy6oaRN8Errngi74wf4gmnWDfDc+S4Cm0F5Vb6Mr2beDDrZs24Dpsdy40WrFMPw==</ds:SignatureValue>
        <ds:KeyInfo>
            <ds:X509Data>
                <ds:X509IssuerSerial>
                    <ds:X509IssuerName>CN=TWCA Financial User CA,OU=User CA,O=TWCA,C=TW</ds:X509IssuerName>
                    <ds:X509SerialNumber>1387674450</ds:X509SerialNumber>
                </ds:X509IssuerSerial>
                <ds:X509SubjectName>CN=70765909-02,OU=FXML,OU=0090000-RA-CHBPROD,OU=TWCA Financial User CA,O=Finance,C=TW</ds:X509SubjectName>
                <ds:X509Certificate>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</ds:X509Certificate>
            </ds:X509Data>
        </ds:KeyInfo>
    </ds:Signature>
</IPAY>

The data is then liked to your SessionID. Modification not possible.

boaz25 · April 23, 2021, 4:00am

Slightly off-topic, apologies. Just a short reply to @fifieldt

I signed up with Circles.Life back in December with the old ARC. All online. I don’t even think they have opened any stores. I uploaded ARC (Gold Card by the way, I was expecting trouble) and local driving licence. The online system said that passport or NHI card were accepted as well. I was approved within hours and received my SIM card at the 7-11 downstairs within days. Their customer service is a hotline or a live chat. I used the latter for an address change and it was easier than ordering a bubble tea

The plan is like the other telcos. Monthly billing to your (credit/debit) card and unlimited internet. Awesome coverage.

RickRoll · April 23, 2021, 11:30am

Should we add HHRO to the list?

Fuzzy_Barbecue · April 27, 2021, 1:48am

Things have become unbearable ever since I changed to the new ID format. Everyday there’s a new problem.

Went to pay for new car insurance last week, and their system wouldn’t accept my new ID number.
Four weeks ago, I got calls from Central Bank to visit CTBC because they said I wouldn’t be allowed to remit any money overseas anymore (I send to my parents each month).

Took a leave, went to CTBC, showed them my new ARC ID
Returned to the office, only to get a call from Central Bank saying, “did you visit? because the system still showing your old number, please return to the bank again”.
Went a second time, wasting an entire day.
Then today opened my CTBC online bank account, only to find that I am not allowed to make foreign remittances. The option is missing. It’s very upsetting because I urgently need to send money to my parents but need to take a leave now to go to the bank instead.

Tried to login to Cathay today only to find that my online account has been completely “suspended” & I need to go to the bank with name stamp and ID. It’s sad that I had to find this information as an ERROR message. I am 100% sure this is caused by the new ID as well.

Can’t be a coincidence that everything is falling apart ever since the day I changed to the new ID number.

I really didn’t expect Taiwan to muck this up so badly.

My advice for anyone out there, if you have an old ARC (with the old number) that still has time left, don’t change it just for the sake of getting a new number. Don’t shoot yourself in the foot on purpose!

Steve4nLanguage · April 27, 2021, 1:57am

I appreciate you being the guinea pig for us, although the frustration for you sucks.

The K-Man’s article about the number change back in 2019 ended on this pessimistic, but not unexpected, note:

Officials have yet to address how the number change will help when foreigner IDs use 7, 8 or 9 for the second character, while citizen IDs use 1 or 2. Without a major overhaul, systems that require verification of the second character may still be unusable by foreigners.

Liberty · April 27, 2021, 2:00am

I have a slight anxiety over updating my ARC. It’s due in July.

I’m yet to hear any positives of changing to the new system.

Marco · April 27, 2021, 2:09am

Your anxiety is justified.

slawa · April 27, 2021, 2:11am

There are none. Services which did not accept ARC ID’s still don’t accept them.
Even worse, some technical systems have not been updated. Some were not designed in a way for the ID numbers to be changed, so it will take a while until they fix it.

All in all it is a big waste of time. You have to take days off to take care of changing your ID number everywhere!

So far I ran into issues with Cathay. Bank account is fine (no credit card). But their reward system and Line integration are broken for me.

EasyWallet seems to have big issues. I think it is better just to register again with the new ID (not sure if possible to use same phone number).
I’m in contact with their support for weeks and it is still not fixed. It still uses my old ID and I can not link my banks since they changed to new ID.

DesiInTaipei · April 27, 2021, 2:12am

I’ve not need the stamps with Cathay or SC for any business with them.

Are you using their paper based bank book by any chance ?