Electronic Signatures Act Article 14

A certification authority shall be liable for any damage caused by its operation or other certification-related process to the parties, or to a bona fide person who relies on the certificate, unless the certification authority proves that it has not acted negligently.Where a certification authority clearly specifies the limitation for the use of the certificate, it shall not be liable for any damage arising from a contrary use.
中文原文 電子簽章法第14條
憑證機構對因其經營或提供認證服務之相關作業程序,致當事人受有損害,或致善意第三人因信賴該憑證而受有損害者,應負賠償責任。
但能證明其行為無過失者,不在此限。
憑證機構就憑證之使用範圍設有明確限制時,對逾越該使用範圍所生之損害,不負賠償責任。

English translation for reference only; the Chinese text prevails. Not legal advice.