You can verify Warrant Canary status with this command on your system console

delv txt +short
dig txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv txt +vtrace
; fully validated 16703 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" 16703 IN RRSIG TXT 10 3 86400 20191219000000 20191128000000 34464 WG+yCBtU4DIw00Unxd68B8x5nT7s93kFqIfErVCUzLnAdWLAQoOAWsJY ff2EusZhCW17Xw0UZqGX/lIZkH5KC5Vo1XqNAzThYc2mYMTvDK15+CYp KW0Fpeh/afeSPLplGmpJRTXsGh2L01K5lFgliwrV6gBw9uK3CYMPD97X E8PdYtbuLw76YrnRjwCaUSovRZ+H7BSdoVTYfelPZ93lsjckkmkZImTr klRd2Gd8v+PNcbOO4nvN8YREznLyEksk98sJ7FkdW8lcbP2cA2H5/5gI sFOJI9e1iLzF0dVhRBozyv63CbwnUihvsWHMr3TJl7xgEiE2xTd0VhpO 11xWAg==

Validate my identity on Keybase