You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 16332 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" _canary.diasp.org. 16332 IN RRSIG TXT 10 3 86400 20200305000000 20200213000000 34464 diasp.org. cezTGWU0sc4LRCGCLIsHZwfsDNvSNcXQSuLURB35h8l2yd26dVqNDPjj 9KAmq1hMofxfwccmsJw3/iroVoyE35UvY7VgsUWcCyXWVqCSrIlBJax+ hKGjkvd6etZi8zC5r9ZjqWJbTeDknAcZ5isn6NElOaCT9xAuR74KGJLy c8gMCxTBdPOgYUBlIKwqMp/ylk5CTycukk0wwlHrrQth7/3alev07VCY TLweTJdTO/cL8iQ+Gh6i5v2JhJGBI1n9m0UkiZK2LJvSCi09L0RqptVi FlEYTcVIs48PvRpftNS50y6+A/OL9a1j75PtYOI0Pgqui1eXa8bsWFTM Q8BlhA==

Validate my identity on Keybase