You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 18372 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 18372 IN RRSIG TXT 10 3 86400 20181129000000 20181108000000 45579 diasp.org. bxapzEYQOZDPwj6XQuxV8S9ne80KUVTgL+f4AFoBfL4mc996QVsVViwe GpXbfwOlRnWXprEwKWgMXsecp0xaDu5+zN2rm8CQq3hWD8AQVLcG0NtH BnNnEsholqZ+PD4BlXomhuFDrIcuYJ48tPbDdO5NSvzu4kpAO1jU4DAr ta3F44V84V/+iAtheAWQbz1tXU0xvohgNOPwSwuKEPwhCnpu9fBru/AW rHm0mK4zwgprO/DTBlAyHcgVB2E90hS2aSbBdcm/dPxYNeNzegB8m233 3OaHzRfYmxCdaNlFtN63+hZwxcE8Cx9LUqsWehMZjSKx6psFzfzl/iYl Kz+BuMAPEp0aCLdnUJKSX5kiDtdTG3GynTzjgvMaaVN1N9lpiStIIme9 hiyorWrIzASy0lkTUEeiwkJ2IxRe/mM+kbLQ9Y76m2ZQtwhoB4DUGgQT 36/DkFoevaKo8cVINsGxI69kmB3FFyd97X6ypZAE5LNZK1t5f5+lNo32 eBJH6KC0CBEMEBnXTeWy6LE51mRLHB0aoVtLY4LqFxSMXqO0vtvhbEZ/ p6H22Npi9Dcz2VvqJLFZXUlD8LgNvkdeoGCHVcUXyKwNWK2xenGbF/Wx 2qdeZn9o+8lvpt34vbIxlIpzoQ+OeEGgeE6HQEqzR0b4Xt9LFQTfmkga 1Ase1Md33fc= _canary.diasp.org. 18372 IN RRSIG TXT 14 3 86400 20181129000000 20181108000000 7197 diasp.org. tVvKvPH9LwdiB/wS6SwEWeSG+irdtJsbW29vGWhGAOMEYbbXg0Ehxz6T J+kWSXDEBFZFQBCkwG23PPyLso5M16Zat2koqE/m6Disx9JmyblMRPks GhdWVGwiXkUguCo1

Validate my identity on Keybase