You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 15030 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" _canary.diasp.org. 15030 IN RRSIG TXT 10 3 86400 20200206000000 20200116000000 34464 diasp.org. dBFgNw1m49NceaReg34DcD/K5i5rvMoShLbkQmEqFsw8l64NV0wmeTgF vSvGJnjtLqnq/DzgrzrEjt7uYDU1p2ayFi8qsNYODv50tE7esad9F6K5 JLIklAyLEcjjX3D64Mn8/nVX6Sxlz9l6Uc9sR5+3mSRA2ZUXQOy8t2kO xiRSUoWpwO4f01MZE+MWSDZ6G3Hca+TRa+Hw4eJ6B8gKowT14Be6JjGk ez3A2WnYcjucVM6509p4pfOi7SjVDxXHcveAxUJuReFpDs8nMuq6xqxL cjk0I8s4bz2SkH77WdPioQ+cQx8IvrAGq8C1D59UI9IJw8rsxbFYSU8V NJkdbA==

Validate my identity on Keybase