You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20190814; expires=20191214;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 42149 IN TXT "version=canary1; warrants=0; date=20190814; expires=20191214;" _canary.diasp.org. 42149 IN RRSIG TXT 10 3 86400 20191031000000 20191010000000 34464 diasp.org. ryY6XwrHiw4eFVQy4t3olpNG81two6nIxPBZrwldYzgUjBgGm6lY9MMi QOG+OnoB7Z7d7j7wbr5VuZuRfRBm+yiajwOZh9Zq5OGFfcRveP0XyBR1 G/m1JIgDWjxlolekSsZhQBxDgKHY4ZvqODKVAuSVWEPdFRVH/UGQfB3k FfXDDbSbMQFaOia6eLlWDD6DKXUFX+YIW+YFXMRyE/VO92ZX/WuUKdhX Bg4YaXe/5rtVDjbxngsI6BSVMopBwY2EWDkWmslLNN6RdoEGUAU0KWD2 Sn4JNm6SJl6BZUYh0LEuV1tDzK5BwPI2kzNPm9Zm+yhx53pXPnh8eySr xjuj0w==

Validate my identity on Keybase