You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190314; expires=20190914;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 86030 IN TXT "version=canary1; warrants=0; date=20190314; expires=20190914;" _canary.diasp.org. 86030 IN RRSIG TXT 10 3 86400 20190404000000 20190314000000 34464 diasp.org. YjWLhAQv/OEPFU43S2L66wyf9R7Ni1erKoJbniXjgjwZRtj0zuAcXl3P B4uMhZUN2PifHOVuqC1tTmcxFaFo729/AYSPfsi5duyn9mzLyBtD6glq SbigICPYzWhScwMcehLUnfqS5Gu6HANk0AkJi2ug60ps62BuFV2KpF4G URn3QyR5J6WhyADNuHiJQJ2TzwzWaK8GsgMggUKx2PmWYcH9Ht3hsPO6 rIviievhtsKwBahAffMyflpfskjCu9edk9Joj1BuJzzFNPla//qNS19X SzCbgnTJyRWgytAbKRUkyGuisldH7onukgl1RUAi/uD67xZB/oTUgv1T 1LfYXQ==

Validate my identity on Keybase