You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190314; expires=20190914;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 66238 IN TXT "version=canary1; warrants=0; date=20190314; expires=20190914;" _canary.diasp.org. 66238 IN RRSIG TXT 10 3 86400 20190606000000 20190516000000 34464 diasp.org. Wx09D1mPNC/BoSwjHEEr9F7WeNiD7mshdYJua1530LlrcyPOMxLYNyqz xTqPTS8PJGac7GUQ5VT0hHvIPGszwOaLEKQ99q8MH0uwYsxNbkt76qQf hBqB0tK4S5U7UUKKc2cfukS18BPnjzspRExvV8l6hK/a7sf7/6hmO6j7 rSRNZipJtfGXEhBGzla7AL8LyvC+7OW24tVzVMIM+Dyjvkex4koPe8lG LDq5bQwhONaxD7fTSFbl/56WKI61q5yK+hGB7Df0mrU5FyrwOFBGfhx5 yvm+X0U55i1N3rqCVU7oVc6/bTgK3Pq5zEmZu5GHqf2bFaA09Rtj/7ic c0remg==

Validate my identity on Keybase