You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 34604 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 34604 IN RRSIG TXT 10 3 86400 20180802000000 20180712000000 45579 diasp.org. NKS4Ypyec6Ex/l0yIaOHeWuE6dj1Jwo9pEFOj0HKwWBcLlcfZ4PSH74E 2jT7Q1Ezjfy9NYsxAuMc79wWMh1HsOcwPiZi6uDX597LeyzsJAkR/J4A KpyrdDhm1SmFUa7za2WmXh8SG7KtGrCXJIuCBfNOeU1DfcAEkx9IO4Xh pP4hB7vnOBY659izGmbnn2GP1QOGtQ6XK9R2OcqNd5U4NucT+9FAazi+ aXkfHGMIsQpy9xb/38T8l0bwIx1hsIlH2+iJ0CgbmigrWP0eiQRz18Hg C6t4c7BOjaKWNc8sDuur1nbRY2kZ4DXFFd8z1Gw/RKd4wg6/AbdP/q8R dmmaziAzpqejexW4qA0kW59QATKNDX35K1Bme7yalZB+aP6fqnn4Ordf XlOIGM7P2VV6ul3W/l5X/8LXNFUIrMA07gt5XAHs4YtOkyzW0JLlRuk7 gGwEcRIH37Dxs7s89yTJSJm2ICJ3ADbisbrGdR3JISr8hZo0YJPUSgp5 qY9/2PDsN1Lg23kIk+LN5VQCX2FRlPQvXtytuQlO0I1okBe9R8d8P1Ds UK5t0aOcRjbJ7Z5sfAN6WOMKV7Af9uIZmjLjmRBDMfMxVPpPAO6GHOhq k7LZXtlgQs47jFsc2MVhlZ+1kRuTFda8Wd1eZb59/5SZtC1rcUBC6UDg kNbQVvYAjkI= _canary.diasp.org. 34604 IN RRSIG TXT 14 3 86400 20180802000000 20180712000000 7197 diasp.org. mNmSsGtpjemBM9Lp6KkS56yMi1krmLCqMcRYnjFfC+CDDSzf2E5mwk+a pNC1PYsMhc9L2zZWQu5L6KM50aOArlpJn6ZRibFy22tIGrBM8ER+czIM HaIuC9rQvhyVIUe4

Validate my identity on Keybase