Play the Imitation Game: Model Extraction Attack against Autonomous Driving Localization