You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 21436 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 21436 IN RRSIG TXT 10 3 86400 20180503000000 20180412000000 45579 diasp.org. MsuBgpQvy2DPvS1Tr4U5BrtgFoUgDKjLaTXOuIx7o8h5RbNtm+qZuCI9 3x0gMmMLAFS+x1Fs5f+T2b6+cK404D+lmqegHbilA4TeKEKC7l6wlP5k HOfCpU3ONlcQHgGeUjWFn3IZgtQfQ9oE4ok7lZBtdzJZzRH1wtEB+OXN t+DnxOIR1Gn+9i07Vx/xQ2i31gB9uv28M+UYknidekVnwlMrOvrbWQfv 3i2P35/a9PLneIR8t64eYI2IDtr2lR3SRrNSY6cj+m24+jmy0XVOPVZt IKpRdyfV1ub1gNc9ukMXTSzGx0/2DRAGG12V0ZHO7GJFFaZHpV/jKOkd d8igztwmBuPEv43WBTbOISQsfmagSqoxu/+1AE1T2tTw5QmU0QNe3eiR xFgMhRAhvSuDjcS2Dmulbg+hyj9/6adbSLZ9t8NPnMYuoiT+IraVwNL+ 5tvp1m3779xQJ9t/Pz7R5efDRvJ/wPJD4I7ZS9/NXxP2sLf+UNAB1COc bPJOXUQHqLsYq31TTSCss7ZKu3HLifKfj7IFsLiw1+sjNrrW+RM2syfd quOlDlzxUMqob4HjgLd2mh9aTTzgmdrLI29Asus4kpEuqhI6YCumrovR fJTCQpbOd5oLkpMherlniJo71zSbWm3KTcYdNun7CskmUYy1N60LfmtM 2uReVeidI8M= _canary.diasp.org. 21436 IN RRSIG TXT 14 3 86400 20180503000000 20180412000000 7197 diasp.org. IJ7BxUO14/PUinWwIiopRkVkPJCRjqQFDxYmCvhq/DTziXrVbVcswDLo zibpetMh5O7qNmDs0eSF3vTCAqBXGrgJuntJdbXOeHH8ed4edxH+SxvK 8/WAwUxUefBwef89

Validate my idenity on Keybase