You can verify diasp.org Warrant Canary status with this command on your system console

delv _canary.diasp.org txt +short
OR
dig _canary.diasp.org txt +short (this will get you results without validating the DNSSEC is valid)

You would get a response of:
"version=canary1; warrants=0; date=20191122; expires=20200614;"

Meaning:
version= DNS Warrant Canary Version
warrants= number we have been issued
date= YYYYMMDD of when this was issued
expires= YYYYMMDD of when this expires, if expired then canary is dead

Running with +vtrace to validate the RRSIG:
delv _canary.diasp.org txt +vtrace
; fully validated _canary.diasp.org. 13482 IN TXT "version=canary1; warrants=0; date=20191122; expires=20200614;" _canary.diasp.org. 13482 IN RRSIG TXT 10 3 86400 20191226000000 20191205000000 34464 diasp.org. nVn52nyes3WS6dm1u/Gd3X3Zaf+jqKUYibJHYt0rNc9iq2e1Xv/uE8r9 rgVFECqLP+A+EQcMD+cfhl7tObqqk21uIk5WayHW8zti9Rqr2XgIPMQn Z739DTs9Mtlgnbm2VkXeBuR9Kg4MW8t3lCOYa3mq35rrvzotFfg3TRMU hDt8Ik0X3pbv1VmecmsNirgZl+1ARykyOFzMd7zkdp6SMIF/HOVr89YQ 18ZPKDi0j0VLYVBPJyEE40PyuRNsj6NlM3H2UpQtfqOoLTjNPKYqT4sR D7xvJCqS0/QrZWc1mcdy6frGD4JqYon6NRA8km3QbW1sdhzR31QxIBco vxegow==

Validate my identity on Keybase