You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 67396 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 67396 IN RRSIG TXT 10 3 86400 20181101000000 20181011000000 45579 diasp.org. UnlQ9kf1v9nPuXV2JJAlvyzZtTtdE+IhJeKj3DmHkoxqq63BNwKQuyoH gtyKyOAuynzUAyUJMe2tU6Ign8RlCTMLpCTslveUsrDQYVglpdKHxAAj uZ1N7eRqdie5MmgsJYLSerXQvQQ+9b3YXnrGlyAJI8pnsvg3FsWohlwl 9kbYwsQIkip1WqjP0Ih4M7PlFj0WRJFyD8DgL+K6T9Ebev6rZHwISLli Xgey3oZhKs63Vvw50NocK8sEtzsTo8q39v+nbScZTgFkPjYzQuTBW9yN pkt0ppRQ288fu/zbZG68uSJzftCFOqmD2A5oGuvWvwBMIYRceNyOIpqs Jd/ZTNlwL3Bn7QEdg6G14j6ixQ3/hVZVjtUuzMwv/dDCbUKiQeDX6J3c lJsSBv0CwoDQfFzBIhf6MScKhWX04VVPiBj0eaq3i7gaDcQ5QhG+1f48 8PmJ7vYovLrl6Ev+tBjgayK7vGS9ZUaBY4kfqUxsM/gygUwzHUBDxv+n 4e/we2t2ZfzF9adPTo0yFjb8NoKoIBl6XMBflA5hXaMWALvaHsqm+iwp EyQHhYEReeHRRDYG2RvBySSWkiS50fTHfpl1bjN9/wRG7Ph1VWHGYLcc d6X329z3a6dKT054AxxSr8518C464BTTZXtAiRbn7z8HXtxdIPZE5xQP BVnjE40sCp0= _canary.diasp.org. 67396 IN RRSIG TXT 14 3 86400 20181101000000 20181011000000 7197 diasp.org. 9o4fY1DGJn/wz2b8rS08fQAryRCElvwnvJyY6plhyfHcNERUcRJXVFO3 tNdhhywsv4JBhIb0zfBkzFtDB2rBZZqxGEwUxAJN/ji0lgDIEMAoxx8L VH6kacj39+dtDzt+

Validate my identity on Keybase