165.101.28.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS152626 Cloudbase Network RPKI valid 44 3800116509152626 2026-10-13 2026-10-20
AS16509 Amazon.com, Inc. RPKI valid 1 2132419002645316509 2026-10-03 2026-10-20

RPKI

6 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
165.101.28.0/23 /24 AS7536 apnic wrong origin
165.101.28.0/23 /24 AS16509 apnic wrong origin
165.101.28.0/23 /24 AS21859 apnic wrong origin
165.101.28.0/23 /24 AS131653 apnic wrong origin
165.101.28.0/23 /24 AS152626 apnic authorises it
165.101.28.0/23 /24 AS213430 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
165.101.28.0/23
RIR
APNIC
Country
🇹🇼 TW
Status
allocated
Allocated
2025-06-18

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-13 02:38:24Z origin change AS152626 → AS16509 3492712991299129917416509
2026-10-13 02:38:24Z origin change AS16509 → AS152626 349275202517410099134823152626
2026-10-13 02:03:08Z origin change AS16509 → AS152626 443932120246206129996809680968096803462134823152626