Regarding the Wikimedia vs NSA case...

Could someone explain to me how the NSA would break HTTPS to read traffic? Routers generally just encapsulate and decapsulate traffic, not encrypt and decrypt it. How do they have every key of every packet? Even if I assume they have the capacity to process every packet leaving the US (Amazon hosts a lot of the international versions of their website in Dublin), how are they breaking the encryption? Or am I mistaken about the operation of HTTPS/HTTPS has a …

amazon case decrypt dublin encrypt encryption https international key nsa packet privacy process routers traffic website wikimedia