This look not right to me
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun2001
10.8.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun2001
because this
10.8.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun2001
already includes this
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun2001
Post client config of PIA? (*.ovpn)
Probably remove private data and inline keys/certs.