OpenSSL: how to “properly” verify the validity of a timestamp token

Question

The documentation https://www.openssl.org/docs/man1.1.0/man1/openssl-ts.html isn’t very clear about what the verify option is exactly doing.

Based on https://www.ietf.org