Why can't I forward a /23

[yubiuser]

See here for more details (posts from DL6ER)

Support prefix /12 for conditonal forwarding

That's valid. Its a little clumsy though... Also does not cope with narrower than /24 netmasks, as far as I can see.