You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 62453 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 62453 IN RRSIG TXT 10 3 86400 20181004000000 20180913000000 45579 diasp.org. f2WECettmrA1idpXyTmvdBdekkvtWBzXeRszj0A6iNJ9XEolS17bAFR6 OumgKul6aZAydgoOnLrxqC1TURRk7Owzm5z5RR+r5J36WIRPQ5d9Iofq BkOaAsbHHATvV8w/1ZNPJ2rWf9a9lxbtzrJbBzpTQixrF3K1c4D55EQl iooaCldxREFVbhUOjoE6nbMEXBryjMDQsCRzEVCVpKO38l7++PbM9hLb qhbiWxqc6fAHK1TfWDMgFG7Wxh3Lp78n5aFOhFZtsN7Em1frdniZ/aYn akUd7LH7PpsjFiwkLbZVe9dbL81FhPxFPVpmd1/snXKP6bRBlsfh+IJX 1wZLn9eVqXIC4QSNtLxNsaJ1hmyLb+BhgsGFsB8vXSzOo7fUZxI0g+yc NmfXXx7riADkah53GIzyqOo+pZU4fG4MU1It1Hi5pbth4P1uAW1xTrwI WZ5tJQ9hcKbjYp8lOAugMvFCX40Lm9GeH52xNtgspnhDDCFM2/GjLlnW eKJDSNN6FuEsIvUgNfyMMmsZcjs59N4+wTrpoq33vA/dWzt6EtEj8Rxj QpP1RWKoHxvJ5+AYc7mDDj/DJ9Ah+sZgjuMp9SikU3K/cuJAmQO/zNix 6ykb9nUFRRdmIfEBWRmAGVIiOHrtRzcYs1uxsRaq6t6iG4WdkO28+Jgh fY/l3NyhLO0= _canary.diasp.org. 62453 IN RRSIG TXT 14 3 86400 20181004000000 20180913000000 7197 diasp.org. r9UgktvGh9gznh6eVqPcPibBHk40GFeAjw+DswPnqgLt54IEZdUjAx6v mwP8CjXCfp+FRLY6vNorDC4KKU97jI8gDZHLOeoGVk/xI7JVfKBAMb87 jurP+F97XQe4o8e0

Validate my identity on Keybase