Hashcat association attack is working on 22000, too (experimental):
Code:
$ cat hashfile.22000 | awk 'BEGIN { FS = "*" } ; {print "$HEX[" $6 "]" }' > essid.list
$ hashcat -m 22000 -o found.list hashfile.22000 essid.list -a 9
or in combination with rules:
$ hashcat -m 22000 -o found.list -r best64.rule hashfile.22000 essid.list -a 9