Your issue was caused by the generic permit (no match clause) attached to rule 20 of the default-import route-map. Route-maps usually act like ACL's and stop processing after the first match.
In Cisco-land you can use the `continue` keyword to continue evaluating the route-map instead of exiting at the first match. I wasn't able to find VyOS documentation about this, so I don't know if it exists in your OS.