Apparently you can't.

Telegram sends HTTPS POST request to the specified url containing a JSON-serialized Update object.

If you'd like to make sure that the Webhook request comes from Telegram, they recommend using a secret path in the URL, e.g. https://www.example.com/<token>. Since nobody else knows your bot's token, you can be pretty sure it's them.