From `man chage`:
>
> -R, --root CHROOT_DIR
> Apply changes in the CHROOT_DIR directory and use the configuration
> files from the CHROOT_DIR directory.
>
So just `chroot` to the mount point of your sdcard.
Editing `shadow` to delete the expiry times bypasses the normal mechanisms. It could in principle fail if `shadow` is backed by a database, your `login` reads credential from NIS, and other similar situations, but you probably don't have any of these oddball situations on a sdcard. So editing `shadow` should work too.