Assuming you also validated the expiry date.

Assuming you also verified that the issuer matched the expected one, and that you didn't fetch keys based on the issuer that is in the token.

Also assuming that the crypto alg is the one you expected.