You can verify Warrant Canary status with this command on your system console

delv txt +short
dig txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv txt +vtrace
; fully validated 20516 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" 20516 IN RRSIG TXT 10 3 86400 20201001000000 20200910000000 34464 BzXBTrnpjpvsDJrJESs+3carovQE6Rr49gzpEO559zncbJSWmCzE4WUQ SZuRxJrksPHGJB1VYC15vC105H973SlKWjfgkI9Q9H2j9W2DApYLKF77 xqJ9E6sElhnca6hq76uE06wGYgnR8GOsK0QH7WPxzbPSV0X7sPTzxXka A2fua+Ye38mUK1eWSja681WaNRQK5bpf5IAjyeO6dCc4S+JZtt10qxha x+Tx/WyPH4KKSGOxmrheKuEIM1Wl4dsSJBcK+0hNs+1vYdRRZRFZxEnp crL4/AREQhpvLr/+TtoTKyiWIiMYKJPase46T4e7QyR7z3z+jlQ4eL0z F4xlaQ==

Validate my identity on Keybase