You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 20265 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" _canary.diasp.org. 20265 IN RRSIG TXT 10 3 86400 20200827000000 20200806000000 34464 diasp.org. A9A5ygMWWOnLPdzPVClFDxwBqa39JglKRn8E9I1StBIdYInkRZKrb3Ek Vgeb8I3U7myFr9mgyxEjlmF34tOLD95PQKAldABa6GfeS9Ou6r6tCxn7 6P0/qd2HByBoGCe8uvfaerqxSmw/iIgjdS/A5RvublcWlexuu88nrwkb j5+Zi79QwrEmiR/QukHz5zngFUQudetJoZiYPz9pfchslkg1tLWmSqun hIL4N/9bxerXRzVWBnz6yt3xkJc1GmDeHCCfmzLu98QGpfi8ZVRUJAZv BWfndg/iWl6AJ08l8A6Afa67Doguq512MJzryDV/l4ayddlMHh5Mhq5P OUhrWw==

Validate my identity on Keybase