You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20180318; expires=20181218;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 14149 IN TXT "version=canary1; warrants=0; date=20180318; expires=20181218;" _canary.diasp.org. 14149 IN RRSIG TXT 10 3 86400 20180823000000 20180802000000 45579 diasp.org. Umkq7ZWbYXWGE1DAuoITMxOzULfsv7G/Dd3rwuXGiFBDM+cO8HY8ckIT Rn1/VknJJUhRvluDfyjgg5qlJ+4RodwU9DwKdpyfCci4op6G6ab7xxWF Q9xm8nku+Yg0AQPUGoR3xRqcnxa6YmQZCnujPCFM5DybRiV06sSTddZy xoVicITVzn3L+9KkZOjdKxUpzEDbQ4d5sjhCZ2B+++aCyn8Zrqc/vx9k SYjE4604r/z7OBxYxX8pCOmJIk6+m4wpz2oUSW5izLB/OYlG6eJBpSPW gklEW+n1KwNu3v6dPoNZQnEGuiDx62V9qtn1NLVq7yzROnnGTieUg4w9 8QnAsOZOMBIOqdTWWi0u81kEQHiwqur7AdCp6aAVvwTXDJh3u+YLj5Mo Z+kM2VE/G4E0IEDEwktfzviMAl0RjZ5WpSE4ZNCXYwygTIbQvEbMmCfM Xq3ffmoEzpbS3hEXEaCrv9WJXGcFwKtCPXcleKCWGOTGNJX7YsK5jEdS LFMzWUYP7XJUdpplWhWYUpsIpiAEz+6VlUkDJz/+bPuwIpAxwHQNNPkg 3jDkBpCIcTC3WT9JZPoKg0gYxT2/GgG90ItiqEV4j4r/PWCU9SOH7LZc l7Dtohcq8zcMi86plIcfHBF9GEInKK66Gay2ZL3mvr7wBoTLzpVR0M53 zGjNI4qnp2M= _canary.diasp.org. 14149 IN RRSIG TXT 14 3 86400 20180823000000 20180802000000 7197 diasp.org. VSkQO8KX+SygU++//sAzwVHvJNhZ0Sv78wlQKtPCYanTu0sMwJc6plv5 B/kuy0El+rT4JBM3sXb0K24i8S1NS08928YjcRj54SF4uAVapztb1eQv 7zg+lMLr45wBJGF0

Validate my identity on Keybase