You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20181202; expires=20190530;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 86399 IN TXT "version=canary1; warrants=0; date=20181202; expires=20190530;" _canary.diasp.org. 86399 IN RRSIG TXT 10 3 86400 20190124000000 20190103000000 45579 diasp.org. PpPXYesA/LHS1wsfgLnTQy5i3Ep5/FR3eUhiLkk18hGyuJoixOViku6d 9S8+Oh49WSiS+LmlJjAUcINXsi4ykketAQOOY/OGzpz0jxg9zblzFCUl AcDokoWpfobFW5q9tTueNJHsSY/GYMhuwsab06Q7e6ibED4Up7wcLehA D9MCmxXd8xu3cmCGZS0LPoupZMlhekmamXc+OkbuAngyifakAbGFx0H5 c2XOrcktn28OK9Q5n36kRnJ3zeo8Cd58vrkCCVq9XeNFi29eeBF48pMJ SJeuaQB96FmzWJCNuQabxXcxqj2HOL9NKVnR/yySSywyRyazUrNz0sa0 eOzV5MMghggL1nFXTC3k4CGk7mw6kyA1+iHym7vu3PhGLOplpsg/Xgp7 zVoTng6ST71i9i4LzyHg1CnYxFhb3DHGuaxJG4CRIssHSAJrt8FNaAbU SQmLT7LxiDC3Yck34aGb49/F6N93A2Ue9e2mwEbKRa2nE4FAaj+89dro ZmcWThXdkHVCnOtyaAQx/O/ZL60BH+1TB+AtyZSQ+fN6AaIKfAgxSy6T 8EoFdFKtevcrKabpL71x1q/BGUSJHCFkrBaXL5f1nA6xzs1XOsMNohnj T25KxckQqyJOJvrseHtnq51OJhQtIRBF7+mvWZg7p1m8ZctJGMzqNiDu tSyYM8jII98= _canary.diasp.org. 86399 IN RRSIG TXT 14 3 86400 20190124000000 20190103000000 7197 diasp.org. gOYRd+Va8hUffSV6JilfKME7u2xDf3F/xeb360QGSyNDl/ByS3eQ/opw G5Q7BXCw4EZcsyWtgE2PIIyersLG9o0UbgeKsp0yqFsE3pNQzVc8bfPA QuORI213GdCP3Hcl

Validate my identity on Keybase