Cannot start SAPRouter after certificate imported

Hi! Gurus,

To establish remote connection for SAP Support I have installed SAProuter in our Solution Manager Server host. When I am trying to start the service, it cannot start and system didn't have response to me. I have checked related notes and manual. Still it is not clear to me.

Please help me. Does the saprouttab have any problem or SNC_LIB's version is not correct?
Many thanks.

BR

Alex

Server: windows sever 2008 R2
Netweaver version: 7.0

Solution Manager: 7.1

SECUDIR and SNC_LIB successfully set and I register my system into sap system.

Distinguished name:

Certificate successfully imported:

My saprouttab:

# SNC connection to and from SAP
KT "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 147.204.2.5 *
# SNC-connection from SAP to local system for R/3-Support
KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.97.93.47 3210
# Access from your local Network to SAP
P 10.97.93.47 147.204.2.5 3299
# All other connections will be denied
D * * *

Run start saprouter command;

dev_rout log file:

---------------------------------------------------
trc file: "dev_rout", trc level: 1, release: "745"
---------------------------------------------------

Thu May 04 10:02:08 2017
SAP Network Interface Router, Version 40.4

command line arg 0: saprouter.exe
command line arg 1: -r
command line arg 2: -K
command line arg 3: p:CN=mo-212618ea2, OU=0000033018, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
GetUserName()="S0017449477" NetWkstaUser="S0017449477"
GetUserNameEx(SamCompat)="MO-212618EA2\S0017449477"
GetUserNameEx(UserPrinc) failed with 0x00000534
SncInit(): Trying environment variable SNC_LIB_64 as
gssapi library name: "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll".
File "C:\Program Files\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
SECUDIR="E:\SolMan_Media\SAPRouter" (from $SECUDIR)
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.1) to CommonCryptoLib
Product Version = CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.18 pl40 (Apr 14 2014) MT-safe
main: pid = 10004, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'