I have an application where I create a process and call the dumpsys telephony.registry command to get information about the mobile network status.
dumpsys telephony.registry
It reports private values of core Android services that you would never be able to typically obtain. Official document says "Not for use by third-party applications".