Aliyun provided an official description of the signature of API query.
Here is the official document about API signature: CALL METHOD

There is a small problem with its description: you must use TimeStamp instead of Timestamp!
That's all and good luck.