Client Authentication - Trusted Certificate Authority

I maybe wrong, but I am not sure if this is possible without a redirect and a connection closure.

Any iRule you do with the HTTP_REQUEST means that a valid TCP+SSL connection was already established potentially without a client side certificate. You cannot serve that HTTP request unless you force a SSL renegotiation and this time force a client certificate to be presented.