You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20181202; expires=20190530;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 86400 IN TXT "version=canary1; warrants=0; date=20181202; expires=20190530;" _canary.diasp.org. 86400 IN RRSIG TXT 10 3 86400 20181227000000 20181206000000 45579 diasp.org. iXNA8Hr4MJY0odpdVmmmnMo893Hda85X4cqh55vslldWjcAwAVnaRAQc P70HgIrJpPIf994gz7KV+QzpY+ewwPODgro3ixu5zR30+oI/DEB+Tr2w BBgNXMI1e/+/iULVkTQtOUHIsG/Hnf6HHZEOiiISDb/G0QObYZd9ytFa 6epkQt9v9af3t/+q7EZX1+di7ud1xtgTYvRIewiGXU4mTIrP4AAwPR8l 77wyaBMkhe3dD9nK4OLkcaMTgzEMk53Re3jlXHukYgQQULqkUeyrgxRq EHt4GxUDWstwG17SW7EzIgJyHePDTkweLAMPAjG5e/NTphDKPwH9U2gi j/urE9gEjmx8OYh2zBJynn3PJRXgAQojTfluULAYmxI82oTg9pR99RkY D7WeiNw4LEBLgJ7Lxf8dIK7DQ7C3xvWOHvY1J7XFXpIWhGfrLI6D4XMm bpmqcSztUg/ogEQ7ifwoUT89FEvaKkkb+5pzZ7txyBeOQa0qSHTXadw8 JqJZQNiPFDqnH5mvBwRcQD6RyoUy/YgYXiJ/7EYNPKAy4842+GkqrJoJ oSSS+C/tKx7X7/j6SeZsrQBfvSKEey4AlK5Dsq++zWYW3qLTgrGLld3c 6LvuUA58bF7X9616jpjle7AVVQILYt8lQ6WQZewqNfbFm78tAVCojO/B 9l6QbWv4cb4= _canary.diasp.org. 86400 IN RRSIG TXT 14 3 86400 20181227000000 20181206000000 7197 diasp.org. dgAQuagGypmzFDrgb3mTIqaXSzONRT+PasDv6bEtuN0gOLe/dY/UCyTM SLb8ZMNvUFiws7SyHHUlUiAAXgo+JemBfEcUY6oqehHY25EOYyf1ucgz 7kYesKE0SzUQ/1pl

Validate my identity on Keybase