You can verify diasp.org Warrant Canary status with this command on your system

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get:
"v=canary1; warrants=0; date=20171020; expires=20180507;"

Meaning:
version=
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 86399 IN TXT "v=canary1; warrants=0; date=20171020; expires=20180507;" _canary.diasp.org. 86399 IN RRSIG TXT 10 3 86400 20180308000000 20180215000000 45579 diasp.org. mBMgaZeZ6/NQze/3fKndDViH5qhnhlnQEZWDxsJGSCt0hxXUW1aCq0om 9Gy1WAq3aEusALV6oD/pxr37Rn/fI2B/MmbrPQmiR9OKj9jZn8Vuq0Pz d6TVlvSHSNo5m8p+peGCXDZ0JpixDQS5HKJ8eUqVQlSK8vbJQQ8JXxXx NKyb3BxJ9IoPX9wN1eKBgd5wJwwP/KbLhnQ2jt+7CnZa6oLAjg5008aF A34TsUgPeY62y9A/hUXogU3fiG6lFqxLDwwKMgVq7CMweIyui1aKjIIS 3/41UUysNpE+4nN4qSFHSm9gBrOywYZocuK+WCvcZ5t4igfSXsI8RyCw tl/X5KDFrEXsqZk5/SUK47S4RqHHOPXgg8T/zcAHWs8D+JZZldzaj82f QDogyNEuray4jmcT3gbDLfoybpp/yziwYgszOd4cWovcjI78cE59yrM5 op7uMO6PcrUgtAhLSzHdaA07HLKVltLDKtbwcXqziQ+RY4yMMRPJNNOV eJpQeS6NfcZqX9kZ2OOcavL2BBsgjDcvQQk7hH51eVF8nkDagCFv9JMW TsAOd2MtpbMBIO5NQmdqVNrUW4SLn/7tZGzq5mMlfvauUUuwN5k+rJy/ VI6NsbBwdaVqDpqvX5tPFnYBSbuyEqSVT9RDQDknmt8U+mbo9TaOu3pq uJJyAsJTV3k= _canary.diasp.org. 86399 IN RRSIG TXT 14 3 86400 20180308000000 20180215000000 7197 diasp.org. XcVYbRZs8AXOt7U4qvhR2BYTuIDV9vHL9czx8IhE+ec5d4WULgAgDmX8 Z35nY/x8AcvR9kY7ENDXG4F7p77vSy6EAAPtk2Z4i4keImAcbXovz/hb n0tnzoM5YwXPOAws