You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 33365 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 33365 IN RRSIG TXT 10 3 86400 20180705000000 20180614000000 45579 diasp.org. lFGDZxtENAcBEVsVydiPtMTBuhpcOSUFKH8G+Nf6e9ImknEc7duhieOD YTUnAGowBJE5DHuKCB4W4xo7l5V8Hp+T+odp6w6uO67CeMsPWpIflF5a DJoWHkzYJCzhCYEdj0u8Ygpw9yrFeCDY06I9QqwnJ7hGhaaWsCCH6Ger /Rslyh1h2MmfmkL63ykUMOn3gmLC83+5YMe6cJM6qurTDx7PkPKlLkV+ vQn2aE9G6XZhduMdu4+sh9YeLkm+tSp2phUrFqJOFg+A6B9mO4wxm93z 6C9428BuWlRJZoWcQEBkG1iTH9U65rdv+kKfCPtS63F9v4RtJBMTKmQj eN20zReqWzlR/ZWfsi6o2pKk8r/UBcLz/BF/Ga5K3y835E9fA9sCJ02d 4O0jeruqKHdK2j8mCGuTUf4w2mOvHR5/3ARuksV1kg3sn7ccJVAEiZTW pC3z14vsuByf+9LUakfz59rrVcQzjVVlwx9OA0APQnWc/akcKe7vE9T8 piYd4zFk0bJvmOS8fBXO1uTC/szeMbAxN6oPvH0pa08x+1woZdgE0J70 X818KPnvjeAYVq/T2MeKAq+FWA21f/eXdxQTBaVP8WMHXl1jFEG/VEsw 8bRB9I7o0IV26qU1LJS1ZuUzacZsIQlNC9xi0Pif0zHLZSlOkcWtoPP0 nSrAXrSSuJE= _canary.diasp.org. 33365 IN RRSIG TXT 14 3 86400 20180705000000 20180614000000 7197 diasp.org. tNzuCQRCFKNJz9OUxuDWlTlT+IcYILU7HU60p2d3nmoT3MpIYZq7WYdJ hwi0wweYxEfjwJuuRXBHyp1OPWShmQ1XUalPRjIQsKAtwqVnA4nmfzmt o/jWb3TNWBrQYUXV

Validate my identity on Keybase