You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 21596 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" _canary.diasp.org. 21596 IN RRSIG TXT 10 3 86400 20200611000000 20200521000000 34464 diasp.org. QkS0F6XWiebEHbfbz23Vxe9FpDrWGiS5CtU4Uo0qA/kOHMSJoCD2HH0X I/nVicVoNnjv29B4Fsnmu3W7+6dM3nhy2zAdW7zzKmu101Ljpz5C/zR3 hpRmFktfif7YTNPXwWBTc3tpR/57CbFYCwFuVeJbpirvBdP5XcYCfhRR a6FOyzWIavCuGFa1uZ91lMjXuOjVGJiWmqiJuLwAeuuu6UiLzLXdvrVr NB8yNdURUAsTAwi1cTMoNbJCqqXUs85E5z6YJvWJLTnonybbRVTFM4W9 2u+h67iOKBNqP2sm5ArGg4PRy+XLI4/bKNWvuOFi025KM7KOHJYzPFp4 +jYfjg==

Validate my identity on Keybase