One could use the AccountService to verify the session. The following example is using Twitter 2.0.
Twitter.getApiClient(session).getAccountService().verifyCredentials(false, false).enqueue(new Callback<User>() {
@Override
public void success(Result<User> result) {
// Verified
}
@Override
public void failure(TwitterException exception) {
// No longer valid
}
});