You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 62968 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 62968 IN RRSIG TXT 10 3 86400 20180531000000 20180510000000 45579 diasp.org. kfeAk/IK2R1d04rJsNYbfIG3mLcFsGfQFrfDU4VJclf6voUY53yRZirn HBSpZPQyLqE03QN9mIAgk/STng5hYg8cJ7nV6iBuQxFRUIAgZMiNSySx 8f1xd7rmEyQF8ZZ6ie1+LPv2Sv0xHUga+ArZ8D9UjRwfYNw7oeHBGd01 hF1tFAZ49jm5NnqFbqJ9tkq0Ou+h8emtbP2SuKJ3rSy8bpneafq0BOBm 2FsgHDUbMnlH0cnbWNOF5buLmRIL9RcyTmgO3VdyGdCUPCSoUnujtrSM CPBuArgSDaKQo5K80T11YETnfROHC8yVw8NZ5CkPc5F2hd20QVXtmTfw Bh3ykQTO/3bsB935gH4GP1c3BFD6EgMRY9WAROFLIHl4yAMy9H/pCsne GmSnMOM3lg8EQ3syPetw+NAOY9Sy9fgRX4Kx8Ztfjda5lOyZ21hoNM0C DjUAxFcWjP8//RIXGGynNW9Tq7pACrolr+FAPEQ0UW52w5bJRgCFTnCQ bQgaJlQAnveu069SjR/R+ieGKMMonfd1XByPyKSaI3ZXqhI6HxrpQPN0 rP56cvFPXIVPVEsPHBk6MJz7mowv8eGZVWxGQwgOwSB7Z2dr99q5m+jB 233ZrxvJ1qikMe3q/xSUlwFWgXJD0Wsa+x4K/WpfUvAVbepqXO8riFWJ 64bmuGGbYJU= _canary.diasp.org. 62968 IN RRSIG TXT 14 3 86400 20180531000000 20180510000000 7197 diasp.org. WnMi1CDseDnY0GurPMZzWLYq8f0tfr3Qj95pY7X4yk6T0/PBNHm5yzTx yXxoW/9P+jOk+ZUlEeMy30QWUNdgQevaZESBuOSyVxXfQTxjdzCAv/RQ V+klmncA/g6YjbM/

Validate my identity on Keybase