You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190314; expires=20190914;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 12282 IN TXT "version=canary1; warrants=0; date=20190314; expires=20190914;" _canary.diasp.org. 12282 IN RRSIG TXT 10 3 86400 20190627000000 20190606000000 34464 diasp.org. SAbKbMeYcYGqJfT8WfIgbAnqwcAI+m2R9i0yPOAU9k1hFlaU0G0AHYZS J4kghml15z2LaJa/aUOs8uV8ucrdq2MkoEYA2uie8j24ZtfhQ4TzcVbq uVA+f6SKOMZrbg6mgvB2V8sjCPyaZdSaM3WNtifZn9TQh/MRKPccGtVx FJ1WXBTmBiujdA/CSstmKIsD84PfF9y1NZVzRwsT271WPtEEWAjfH+PG p5SaS7gqYf6AtIZHWyDOBBY/Ccn5GTG8sb/NiJ7Apa+A3ifon0Me8YoH VUg7ZHFefJFdMSv4JGA/40Z2pDkj/uH0Xy1MORnY/SFAmWGsnfHvq7Ey lP9FFg==

Validate my identity on Keybase