Same problem here.
Before attempting, you should make a backup in TWRP first, just to be safe...
Ok you're back in poco F1 newest ROM.
Please see zip which you should install from Magisk (not TWRP).
In Magisk module just click the orange Plus icon and install the zip.
When asked reboot, and after that you should be able to bypass the device not being certified.
However, please note that after this install, the cts remains false in Magisk, what ever I try....
//cloud.tapatalk.com/s/5e64bcc...isk-v1.0.3.4.2.4B7(Unity1.5.4A4.0.0.0.16).zip