Modern fobs should be designed to prevent replay attacks (there should be something specific in the request that alters the response), so it shouldn’t be possible to record a response and then use it later.