Please read the documentation.
As per the documentation you must perform the request like so:
curl -H "Authorization: OAuth <access token>" https://id.twitch.tv/oauth2/validate
You must pass the authorisation via a header not as a query string argument. Most if not all of Helix/New API doesn’t accept Auth by query string argument