Verify the `time` of request

`sig` is valid for 10 min if partner's clock is correct, 20 min in worst case when their clock is 10 min behind.