Let’s Encrypt challenges don’t originate from alibaba.
Primary: see Timeout during connect - #6 by mcpherrinm
Secondary: Use AWS. They have IP address files you can get from them.
The standard disclaimer applies, these may change at any time without notice.